last executing test programs: 6.819921324s ago: executing program 4 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000"], 0x3c}}, 0x20) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x8, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb000001c}) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0) close(r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x110b, &(0x7f0000000240)={0x0, 0xd736, 0x0, 0x3, 0xbf7ffffa}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) unshare(0x2c020400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r5, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 6.562945087s ago: executing program 4 (id=261): r0 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x40004) 2.526707825s ago: executing program 2 (id=295): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.482094455s ago: executing program 2 (id=296): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) close(r2) 2.443263145s ago: executing program 2 (id=298): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x44001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) lsetxattr$security_selinux(&(0x7f0000000180)='./file1\x00', &(0x7f0000000540), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 2.344606857s ago: executing program 1 (id=299): syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_clone(0x200, &(0x7f0000000380)="026772831aba6a227eb059c384410424debd66714a47a326ef956cc420dee840f7eccc3077aad2b7116422ca12bd87ed5ef32d76b83fc13d3bfe3478949442e7d23da70ed6a749f427cc1129f49abfbf0a0efd3ac040a5ddde4dde7abba6d8c41cb40dabe78cc372d5fd4516a1785ade7d85bb7065d2e5765f25aafa22a05db882b437e715636bda10b90fb291c067a60fa5e66de3982dc8bc", 0x99, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0)="a7839f746ffa8aaf04940d4562dff626dae8ef3620782fc800a63ba2ae445bf0f6cec554918fec64c179") sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c", @ANYRESOCT=r3, @ANYBLOB="1a1d5f26e9a6b52ec76fc0e0291aafa6f841d6beee91b22e559f9dbd1c867cb619704705e4f3e76bd8b9306b449753850208c2d515dda7f4bc1ea4c44185db1b24fe1da8bbd623cca1f3d1a3249a1b2ece04aed057349bfb2de4b3"], 0x1c}}, 0x20000011) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r5 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYRES8=r0], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x3}, 0x18) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x44885}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="28001002f8e57547a91f26bfe4cce215971cc0320100c4990aa784fab13816a84141966178fc82d86d1ee097aa24e319e843fbb504e1939c5a9fa95ab4ec4e698f2a929ad588472ad977a7b2b537b6a47d7654133b8be2ae76b0b9e4a759566e0c4affcebd", @ANYRES16=r8, @ANYBLOB="020027bd7000fddbdf250500000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000300000006000000"], 0x28}}, 0xc000) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x44040008}, 0x4004008) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04000090", @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf2514000000", @ANYRES32=0x0, @ANYBLOB="0c009900040000003c00000008001400", @ANYRES32=r9, @ANYBLOB="0600120109000000"], 0x38}, 0x1, 0x0, 0x0, 0x4044084}, 0x40000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000002700)={'batadv_slave_1\x00'}) 2.255357878s ago: executing program 1 (id=300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) close(r2) 2.209943139s ago: executing program 1 (id=301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000400000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8, 0x10, 0x1, 0xffffffc6, {{0x1c, 0x4, 0x3, 0x5, 0x70, 0x68, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp={0x44, 0x24, 0xff, 0x0, 0x5, [0x7, 0x400, 0x655, 0x1, 0x8, 0x7, 0x2, 0x8]}, @ssrr={0x89, 0xf, 0xb2, [@multicast2, @broadcast, @broadcast]}, @lsrr={0x83, 0x27, 0xb2, [@multicast1, @multicast2, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @local, @local, @dev={0xac, 0x14, 0x14, 0x3b}, @remote]}]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xe2, 0x1, 0x5, 0x3, 0x0, 0x5, 0x480, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfe59, 0x4, @perf_config_ext={0xbb1, 0x2}, 0xa00, 0xfffffffffffffffd, 0xffffffff, 0x8, 0x9, 0x1, 0x2, 0x0, 0x4, 0x0, 0x4}, r6, 0x8, r5, 0xa) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6000) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_TESTMODE(r10, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002540)=ANY=[@ANYBLOB="f4070000", @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf252d00000008000300", @ANYRES32], 0x3f4}, 0x1, 0x0, 0x0, 0x851}, 0x4004001) 1.809588965s ago: executing program 1 (id=305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f00000006c0), &(0x7f0000000400)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb000001c}) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070002000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000005, 0x40010, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x40) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x2c020400) umount2(&(0x7f00000000c0)='./file0\x00', 0x9) unlink(&(0x7f0000000180)='./file0\x00') 1.682659356s ago: executing program 0 (id=306): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1, 0x1}}}}]}, 0x44}}, 0xc4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x200, 0x0, {0x0, 0x0, 0x0, r2, {0x5, 0xd}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000000004000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703090008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x42000000) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 1.594408828s ago: executing program 1 (id=307): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000200)=ANY=[], 0x0) 1.543877268s ago: executing program 1 (id=308): r0 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x40004) 1.390121301s ago: executing program 3 (id=310): syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_clone(0x200, &(0x7f0000000380)="026772831aba6a227eb059c384410424debd66714a47a326ef956cc420dee840f7eccc3077aad2b7116422ca12bd87ed5ef32d76b83fc13d3bfe3478949442e7d23da70ed6a749f427cc1129f49abfbf0a0efd3ac040a5ddde4dde7abba6d8c41cb40dabe78cc372d5fd4516a1785ade7d85bb7065d2e5765f25aafa22a05db882b437e715636bda10b90fb291c067a60fa5e66de3982dc8bc", 0x99, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0)="a7839f746ffa8aaf04940d4562dff626dae8ef3620782fc800a63ba2ae445bf0f6cec554918fec64c179") sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c", @ANYRESOCT=r3, @ANYBLOB="1a1d5f26e9a6b52ec76fc0e0291aafa6f841d6beee91b22e559f9dbd1c867cb619704705e4f3e76bd8b9306b449753850208c2d515dda7f4bc1ea4c44185db1b24fe1da8bbd623cca1f3d1a3249a1b2ece04aed057349bfb2de4b3"], 0x1c}}, 0x20000011) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r5 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYRES8=r0], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x3}, 0x18) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x44885}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="28001002f8e57547a91f26bfe4cce215971cc0320100c4990aa784fab13816a84141966178fc82d86d1ee097aa24e319e843fbb504e1939c5a9fa95ab4ec4e698f2a929ad588472ad977a7b2b537b6a47d7654133b8be2ae76b0b9e4a759566e0c4affcebd", @ANYRES16=r8, @ANYBLOB="020027bd7000fddbdf250500000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000300000006000000"], 0x28}}, 0xc000) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x44040008}, 0x4004008) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04000090", @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf2514000000", @ANYRES32=0x0, @ANYBLOB="0c009900040000003c00000008001400", @ANYRES32=r9, @ANYBLOB="0600120109000000"], 0x38}, 0x1, 0x0, 0x0, 0x4044084}, 0x40000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000002700)={'batadv_slave_1\x00'}) 1.363972941s ago: executing program 0 (id=311): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) close(r2) 1.172834693s ago: executing program 0 (id=312): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x3938700}}, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init() r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 1.152323164s ago: executing program 3 (id=313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f00000006c0), &(0x7f0000000400)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb000001c}) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0) close(r1) r4 = syz_io_uring_setup(0x7dba, &(0x7f0000000580)={0x0, 0x272e, 0x80, 0x0, 0x157}, &(0x7f0000000600), &(0x7f0000000640)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000005, 0x40010, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x40) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x2c020400) umount2(&(0x7f00000000c0)='./file0\x00', 0x9) unlink(&(0x7f0000000180)='./file0\x00') 909.805777ms ago: executing program 3 (id=314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="05000000040000001e010f00db4dbabe3cd8d14ab34afaf13ac59f9b6e00a017eba8b2f6372894a5747c88dd05b003366f519ab87837d572b7fffde4b7e89813f71cd27f40cde07427d4e571bf779bee7caa81", @ANYRESHEX=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002d00)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r4, @ANYRES64=r5], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x20, 0xc, &(0x7f0000001b00)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001ac0)='./file0\x00', 0xc0ed0040, &(0x7f0000001a40)={[{@jqfmt_vfsv1}, {@nodioread_nolock}, {@data_ordered}, {@noload}, {@resgid}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r7, &(0x7f0000000e00)=ANY=[@ANYBLOB="7f454c46080505fe080000000000000002000600080000008f0000000000000040000000000000002b0300000000000004000000ff0f3800020007007f00fcff00000000000000000300000000000000ffffffffffffff7f0400000000000000ff010000000000000000000000000000ee0f00000000000051e57464060000001910000000000000000000007000000007000000000000000700000000000000b90600000000000002000000000000000e61000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/1104], 0x8b2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="962163424556c501986998e4f47990131a76f7de17e328d27dee9185c4515e4803bc1c91b769ee5042ea87c10b63b46311ffe442de1b8aac61f85c53b039ada9909f7f31d485526f93a9171db2934a65125f03d97ca132fe358e8184304b7841ffb887d0d217ca52b7688574bf7f4d0bd35f862f14327e5b7554ff55a0b568fd62b113ce1b51a39df8bf3458804bf3fe4d5c5461b7b555c4733e4c6bdf4716"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000017c0)='kfree\x00', r8}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x20) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x20, 0xb, &(0x7f0000002d00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001b80)="eeede6cab5e33beb74a27dd632ca25c50172e4d2527783053924c0507b8db7aaa92103cb5f693d67f0485abca057bdcc2986af101b0363fa6405c5857d7834a53a98330b678423463ea76e693f12d0492c3c5b5a8a7eade4821df795587826566686fcfba965592af3daadcaf579b5de28077b80b362d4460dffb4e2564ba830f298f05525a97772c8aeb91e1b30ea895d4a0d3b42c64bd1d1d827b2c1364e3376603f06fba57f06aa7198e5aec8ffa955aa9306d102523c0828991d82c2cdc209e3fcedb7985f77a90640701dae87608393786aa8cac373ee949f99064fefa6e8ce93fb2cc39b0983dbccd45e9018a3bd132ea1c5eb7719f6a26547b9a537161e5f508651830ade5664e91b8df0b229f2a26709d4a9e25fcfb0e43eca73fd98e5e5ce5096c2a5e2bd3545f01134c4d81eec73cc6968cf810eb64046f833d539089e494f7fa774a99effeea1efeecdc67a70493687920cfe927cb977c38afab1aed26e106a5f9a87499869a4d0ae1c352952a254be72c633ba21bb577f3e02cbf323c092e578065b5f4835cbb5fc1f5bf68bb654a4edbf64ac250ce523259770353bc1576bb3cae3eb1310450725b0012365140a77d052214e3a7318672400b7bf7213cf621d5df568cf12ae64203d32b1650eaf75dcefbcbb80a132f0a31c5df2399f6d61684eae684b028381c2bdb860ea83f5e028d97b4cfcd468becec5159542bee9c3a4633909fceb76f96c4dd0bca54e6fe425c55ac0c58b3f251cfb1fdfa91b9097578bcdc795c21b5c417aa5071ac30c3dd9db9ea60d46163b2fe17b85382d2fef5314a8eb9958ff940a9868f0ddc85bef8f343cfd648b770abe0ebcb3603bff19c27e80a10f53ec41e950fc2493a4c088ee64d3ab0ae9e5318858c5562d1e02befcd9b77c15dd5cae3c0b2b51a334dc9649736a6025ceb244eaa259f32a971ed9c834fe0c1a8f4cf8f46fc3ac91954bd619984d00e3a969bd2d7c16871f61be70d0fb45fbfb0468911d0328be3bf3c63137646bf51db169fa0c5030caa2ba3459ec4eb86a749ebc63da2c79a80074e134ac3920868ffdc4bad0f63418a0f07e9b5f2e84ece4e18331be771bc028498feb15e16b62a31a6e38c62f56b3b8920608449d6e600136a9edac7d7fb35814c45a5acb7961672ec96a4be863739a15f0cfd9e35e7973e2a5a654d29e8eb3d9f31b666d0b4b51e011a5cc20b6c841641adff96e8aa1e7801868bde7005e1a6a10a8fb214d30854e1e603f8235e1f3e43a832ed02209f0fafb1af56076b2c9f9876a8d7de86ebc5cd68f837613c99bf3b3840bf2116a4fc6bda012b01dca3c601eb0e5c6c67ac69252d6f2a51e961ba200ab70a0e1e56a877917d963a6692a741f313704b667b75384a793e8f74c7fcdd93f3792c4b32ae86765196747bc80f65f221951fbdd775ac2e2fa4a62b46957e094fe8f253497d404ea6ad119992dab674fed817dbf60fd49a83176378ed4f7abad490b4a3b74527e8e76f8e1bcc26807e3f70058ee0233274d0a0a6fb852c6752ca90834c464eab08b2803484df690f618a9542f5b4edba1736c6968e14d9c9c977ea0770737c7da7ef29cdc5b17b0483fa4542e502c26a53564dcc7aa7aaa026733c8e9e2f3a1aa5fdae48950a4ff22145ecc77304f06362afb70e5aee0f9e8db7f366981c6bcf1e028ec66f192f7e242b847f076f5c6d17baece637e063b79e02f6667d5ceb2d43c27eecab13adc2bee10444bebcf4fb9016f9fb9d3882c321c0bee80cc451301c1b2bf3a9a805b6422b2a2f3e981dc2d5108735b71539fd02756175e156dc352b652bef7f44ab52df92d4c9008dd00923266815939fbeb1b384a337d79c3c88e66ab5a3473819a29e211b40067edde4c8adfa6c38377f7c1f431af6bcd8dbf96017984b26f2c34fa2266ca8fc4c228a580825c1be93e752b55462d41133cd20c5feb872a902adc88b279ea021a21a500a1ad494f95ee1eb88cdc13b42f86d51452b2e3901fbe3e055d33ac2a5011bc0cf5473d58236694cffbf7bd46ea12f4ad8bfd9aff9988d3144f488a82ba62d761bd01dfb4a755acd6dcb043e8d7f60e2f8e63af2d7ee916e375027c97ed24ec1214be5dcfbd95746059bf324d3ce6ca69ae61e55283cd0f96c09af35c3d291ca28537c689d58d34e06f14c40c42b03f7d3f01253d97d27150b5ed1c9224a7c09a445c705413964a619e9a0e31fa9056176b950cea83ad1b1d523c019b34cc4870224ea2a6b4405ada6074d5672b50544365f22662447ad619db462d8de2274fa2904cdc381cc70dc9f9b28bfe2799c7130f529cf64895a5c419d7c3eca110857a3dd52215fe88d58ad1bdc325776c9f34769a8e0512fdf501b08d3501b763ad231f5c229be2e5336baf6567718e3bc14834f8908b4fb45cac7950261895c5b3671af5657b4d36256b93f0bf92b9823c555459dd3acc589dec7b30df9315fe9c43946b2a59a729eb7e173deb5f8a8ecf4cedf847ad74bdb789be2636639d431df4651f4794327db5eb16f7037523f91afcca719eb71bcc707798b7053b010981bb2c0e65a444d34b527f1b55f260d67cfcc23226218eefc13971e2e6fa004a4958860a4fe072afe0372841bccde147ce0923e1883c2710a57d8d0367bfe9087da54cd84d98b6e34afd70f2a442faa67a06f44e44d083d1f407f6454294db272bf97991acd5f234b0de0f4d543cb06a9feb25980a959799b1b89b85be2a1255b92a131d5d127c09bfea335ff9038e77f9af9ca30f92c817df55d179f52c34b7e042cb91147ac9c5e0b2f3a6913a5567d11352a11ff6a52abed7e47df3dab35f82de029ea97328ea112ac98ee50f1aeb12eef678fb4918e62f48b2c4683c70479ac4942b516b13088db3817c6c207591f0a8f1ff1fe11c05910534a179bdd8fa5ad8fea926460dc8a34d28dba0dc311038101edb3be38d5bb6c054fcb242174de990bb1f02e4b7034f1bf9a43022e1cbb4f8ba6c5cd3ad8246a0d11b9ef9f7fdea5341ea6a5dca5bf01491510fa9702985bca77216e56a273400eb8c84c8eabb40be6264a35766ce3293a105773d24323e968f867b30830d51031b11e98809f9dbc13ac73ebfd6f273122d71ede97b66991f1d3980a18c53239a3060eddb2ade198afc79dc2b59d5e1d8075d771cc5fbcaf09567885c0f6f89fa89b693334bdbe20fe975b71d7e7bb49095a8a26b475393f97891a4bb701eebc1b8ff909d72c80e324b1813de2e4c52deae1936f6773290cebd24b7a12070b50603a79501e629f90a9d577b6d17427024f6f333333f154faf31dbe4f29eaab41f7e076fb5dbce53cd7b4835e30d78d9cefe405b3dd0e699d78903cd76a16f8d0e412f07ce65ffbf191702008f50636d5d97d491c1f312fab5c5dfa2862a3bd289cb968c11b2f1e5b1ca0c165bb8b57ab31c407fe59f66b702f1898631472807a476870078876d8ac5a1de67eee064447945d8dfcad0d702fea3c20465cf7b6f00159431d7f1f80ce6f86bd13685d750938cd4a3e882a4e50dd941495ffd4edcd71e4af15244f0f44481413d7a91c04d9947ddf3449deac707a7f40b4fb62f33501553d3b4c0017ea717d5a321c530081e21b1021f146c78abd55baadcf50ea22358a3466aae58745b60d29f80660022a8ad95e2ea69b73d4bacbd4d2097d61955a2e9cee792c2f3524dda4f0dddafd57eae63168aa1edbd4a4576924eca3cc08c92667ccc856aab2d03da6ee17f2e220e8bad507c5f55a8b11837e31d94e269a1fe119169bb4deaf85feb25af4ece88fb646c73be21eb02048d06f0a3b66f76cfafcf82963289f67222f46d3d3597430148a7a9e1433b654431feb1147027041695e3d1d6c7bb2a44e80e20cfc1bf900152253ea10177b5b3580f513c5eb9d83b20119d8da3c26347727c99b02e30e17edc95871585828784cbfd72c087e2c469aa3165fc3d78ac01cfe6b3e2412a4160c1033d4e1b5a209ce198772f74e8cb397f0e8d2dfe2df67524b18604b1d6e7aa80d0c00b6579480ac2e92eaeeff0fbab5e40c82ec64bc726c163dacb9c4b66affd4454163b26bc6be3f196c02cc8718e7d3e018953af2009625855c19a1c1b6fa5c85df4fe16396852ba7c8f51343525b620af36a65960460993a4fb5f05075f953144d17e0bfd1bd444dec45903ee0702d4214e8d75b87d4dc3eafd1c903d75100b0d527dcc617f75ef6a0facc2a684304f750fe103557d46328e0278de849cea27a4c5e8c170f0248b944b0a94485c98df37f193e62980c06f6a09f2d96df47b9ff73df45bc555d1f8aee1d936d45705dd0d0f820f47296332eb5225cc5c094189fb36d440774fc3d44c825db12b56f5f3da2e4627411808b3cffc07c47c580e22f60fd2e33bd0b76d1183528eae05f4712304fc5abdca4b0063c06f3d894388528566188d536e1bccb291facf9b7c02d0f91517bacdd44087125cf035e7923f7f5e15f5cc5bf5640d354acf3c407313ec320c4c7371993af13ae29073dce2bb980b18eee4a40c0356b43cd2795aa9486419d794715e4af62352bb742f819c6b195fc33c4abffdf4df11b43add1cd0db8cd793bc28fa645ae4d1e93dcfd0313281ccd46589b56db52a4f22e4e18082ad7c916013d2bad0dc493ae319938fadc80b9e59dd95eab686b013217968a81cc4fe3629c6ebcee7493e36e3781d371cfeafbf514be854792815465c7929e2f2ec1360c3f1ff84605de4a30d42eeb27d7c3494dca6fcdb9a2759ef2db6df009c69abb09ad2352bad4d501e3fb3340c8b9a7c87a88784de89c7bec1eba233a63474ee4fc2dfc58e2254ceaef4bb3c305d7f3f1e14703757af6cb8b68645bb6e66a0cdac5c43ec417fa7ea12e721b7e6c043d3f79785957d348269a02ad28b1f3b2383c6d163b50b6670dd225087382857ed9d7a54fe50dd423b8ce37e84e5bdffdb6ca3b2725c54225649a0abd1554cc2983981d5a9f5914c1ed674231e73f58652e1b8732dc5cfbe015a26af27eb4015b4f24e0f6b10ee8e15ba0e94e6079a9282ea5a2bce9613377a71ae2fb2b7deb828d150b3f6276b43d7b44de2a61fa2676b73bea054a0659aabb617be3afec6cd1991d8488462efa8ebf22faea18b4a4b5cb32628c2cf7c9b099263e10623d47c3c60e8a4f5978bfca5fb31f775878c1268a88c09b7cfad41bbb310e6b8ff3ce7be6f252303561452f7a0510ca6e69326505a6e653bb1505f623bb5be4bc1137c8997dc7e3f7ebcf8edb86e6575d0bcdb3266d8f3f2435fc934e6290f685ccea78da8eadf5eb7242633236f1d2023b52b28e6b2910ecc241dc94de8d4b46b77fd7e3982987fcd52b8308b9470e811c95faecb45cd481b8fcc3e59b90497fa55b01f5dfaa657d2d2d215b696f8298194897acdc9e281ca5ae4b1677683c368a405ace2ad96768e9407178b25e80dcf87b945ff640ddcf08bc628a89e8bb27651d4e937482429090e1ac5fbd9fba0ba80734aaaf1eb1b3f33cbf225d5494131391356fb0c03bdad86034c1cb4dc4aaf40987a728aaf90c37fd43bdbdfaa14aca48bc127f9d8f20b48d656020f8a0f9af129fa1e32172388b772369aae93fa58630f5ae5371462164b77b951696b9e4b5d7d273932afb46a2c09490cf82299825b5758b90e6077d0cc2687f5d1cc430e914396dd6bc9a4edd979f4e1182a595180356a47fa22c9657b91d680d32e8f22d218ca2b95c584c14df9a34373b527cfd20c33a663ca63c6501135df838b90b6357934e52f5e5c623942b037071d", 0x1000, 0x20008045, &(0x7f00000019c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x8, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, @ANYBLOB="0000000000000000b70800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="05000000040000001e010f00db4dbabe3cd8d14ab34afaf13ac59f9b6e00a017eba8b2f6372894a5747c88dd05b003366f519ab87837d572b7fffde4b7e89813f71cd27f40cde07427d4e571bf779bee7caa81", @ANYRESHEX=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002d00)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r4, @ANYRES64=r5], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x20, 0xc, &(0x7f0000001b00)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001ac0)='./file0\x00', 0xc0ed0040, &(0x7f0000001a40)={[{@jqfmt_vfsv1}, {@nodioread_nolock}, {@data_ordered}, {@noload}, {@resgid}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLf6U8WloIFETFI2nSBz1wAYHEAQQSHIo4BSetSt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPRenfTxLVDHk6c4s9H2nZmd92Z786OPTtjN4CuNZT+kUTsjohfI2Iwyy4/YSj76+bCbOWvhdlKErXaa38m9fNuLMxW8n9i8XW7sh21Wp7f0aTc+TcjxqvVyct5fmTm4jsj01euPnX+4vi5yXOTl8ZOnz5x/HDfqbGTbYkzjevGwfenDh148Y1rL1fOXHvrx6/T+u7OjxdxtNNQdnWberTdhXXYniXppNzBirAmabulzdVb7/+D0RMDi8cG44WPOlo5YFPVarVas8/n3FwN+A9LotM1ADqj+KBPn3+LbYuGHtvCH89mD0Bp3DfzLTtSjlJ+Tm/D82079UfEmbm/v0i32KR5CACApb5Nxz9PNhv/leKeJef9L19D2RsR/4+IfRFxV0Tsj4i7I+rn3hsR962x/MYVktvHP6Xr6wpsldLx3zP52tby8V8x+ou9PXluTz3+3uTs+erksfyaHI3eHWl+dNlLlvvu+V8+a9z3aT7NPrRk/JduafnFWDCvx/VywwTdxPjMeFuCT+P/MOJguVn8SRTLOElEHIiIg+ss4/zjXx1qdezf419BG9aZal9GPJa1/1w0xF9IWq5Pjj59auzkSH9UJ4+NFHfF7X76ef7VVuVvKP42SNt/Z9P7P4s/fUZM+iOmr1y9UF+vnV57GfO/fVxJWhzbv877vy95vZ7uy/e9Nz4zc3k0oi95Kc0OLNs/duu1Rb44P43/6JHm/X9f9nhWvxL3R0R6Ex+OiAci4sG87R6KiIcj4sgK8f/w3CNvtzrWuv1XmJVvozT+iRXaP33LS1O32n/tiZ4L33/Tqvzaqtr/RD11NN+zmve/1VZwI9cOAAAA7hSl+nfgk9LwYrpUGh7OvsO/P3aWqlPTM0+cnXr30kT2Xfm90VsqZroGl8yHjuZzw0V+rCF/PJ83/rxnoJ4frkxVJzodPHS5XS36f+r3nk7XDth0fq8F3Uv/h+6l/0P30v+he+n/0KX6mu/+YKvrAXTE2j//+zelHsDWM/6H7qX/Q/fS/6ErtfxtfGlDP/m/UxPl7VGNpomB7VGNIhGlbVGN9iVe+STrEtulPkWivOr/zGKdiR1ND3X6nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA9/gkAAP//Uo/mdg==") r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r7, &(0x7f0000000e00)=ANY=[@ANYBLOB="7f454c46080505fe080000000000000002000600080000008f0000000000000040000000000000002b0300000000000004000000ff0f3800020007007f00fcff00000000000000000300000000000000ffffffffffffff7f0400000000000000ff010000000000000000000000000000ee0f00000000000051e57464060000001910000000000000000000007000000007000000000000000700000000000000b90600000000000002000000000000000e61000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/1104], 0x8b2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="962163424556c501986998e4f47990131a76f7de17e328d27dee9185c4515e4803bc1c91b769ee5042ea87c10b63b46311ffe442de1b8aac61f85c53b039ada9909f7f31d485526f93a9171db2934a65125f03d97ca132fe358e8184304b7841ffb887d0d217ca52b7688574bf7f4d0bd35f862f14327e5b7554ff55a0b568fd62b113ce1b51a39df8bf3458804bf3fe4d5c5461b7b555c4733e4c6bdf4716"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000017c0)='kfree\x00', r8}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x20, 0xb, &(0x7f0000002d00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001b80)="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", 0x1000, 0x20008045, &(0x7f00000019c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x8, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb000001c}) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070002000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000005, 0x40010, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x40) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x2c020400) umount2(&(0x7f00000000c0)='./file0\x00', 0x9) unlink(&(0x7f0000000180)='./file0\x00') 220.285867ms ago: executing program 2 (id=318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, 0x0, 0x0) 157.231608ms ago: executing program 0 (id=319): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000040)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000e00)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 101.913089ms ago: executing program 4 (id=320): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f00000006c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070002000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x110b, &(0x7f0000000240)={0x0, 0xd736, 0x0, 0x3, 0xbf7ffffa}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) unshare(0x2c020400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r1, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 101.480129ms ago: executing program 2 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00?\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="9060c3329649f73b6fda3b7f17be64f059ddda420f9fe4b2c8cf356d64a4088b996b2b92ec2cadcda4bd23545bbba43df8e91e514a3f2a8fbeb8973f35f4622056f02eb2e5c4f1524843b19b58188d9fcdc51df107545c8803e09c550c6e7610b5648d454ab1080439da08613c5395d632b91f45f7c97cf594fbe2", 0x7b, 0x20000081, &(0x7f00000002c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x8, &(0x7f00000003c0)=@raw=[@ldst={0x2, 0x3, 0x0, 0xa, 0x0, 0xffffffffffffffc0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x1, 0xa, 0x7, 0x3, 0xffffffffffffffc0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x1, 0x5, 0x7, 0x8, 0xfffffffffffffffc}, @exit, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80a5}, @ldst={0x1, 0x0, 0x6, 0x9, 0x5, 0x50, 0xfffffffffffffffc}], &(0x7f0000000680)='GPL\x00', 0x400, 0x26, &(0x7f00000006c0)=""/38, 0x40f00, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000c80)=[r0, r0, 0xffffffffffffffff, r0, r0], &(0x7f0000000cc0)=[{0x0, 0x3, 0x5, 0xd}, {0x2, 0x4, 0xb, 0x6}, {0x5, 0x5, 0xf, 0x5}], 0x10, 0x3, @void, @value}, 0x94) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x80}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000600000018120000", @ANYRES32, @ANYRESHEX], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000300)={0x62, "a4395026f7fca8f411d271a8ac0352f02647be56f7af5c020d00a854bde7a3a2e42c1c5fcac45b88f2eb03642b134fd8e5b9bfd57889164508e1794a753cea7f"}) write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x44, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x48000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth1_to_bridge\x00'}}, 0x1e) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0xc000) 101.061829ms ago: executing program 3 (id=322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) close(r2) 34.891299ms ago: executing program 0 (id=323): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x18, 0x0, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x8001) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 7.26811ms ago: executing program 4 (id=324): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffda7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x81e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) kexec_load(0x4, 0xa, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000600), 0x6, 0x242002) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r6 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) io_uring_setup(0x2e43, &(0x7f00000004c0)={0x0, 0x4e8b, 0x2, 0x3, 0x2f1, 0x0, r6}) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 3.23269ms ago: executing program 0 (id=325): syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_clone(0x200, &(0x7f0000000380)="026772831aba6a227eb059c384410424debd66714a47a326ef956cc420dee840f7eccc3077aad2b7116422ca12bd87ed5ef32d76b83fc13d3bfe3478949442e7d23da70ed6a749f427cc1129f49abfbf0a0efd3ac040a5ddde4dde7abba6d8c41cb40dabe78cc372d5fd4516a1785ade7d85bb7065d2e5765f25aafa22a05db882b437e715636bda10b90fb291c067a60fa5e66de3982dc8bc932b7b41aa13d0b56be495afa3d791a12bc5ce68a27da7a7b47278e582fd9e831bb5e8ecfec7c07d0286ecfed02f3c7fa548e2", 0xcc, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0)="a7839f746ffa8aaf04940d4562dff626dae8ef3620782fc800a63ba2ae445bf0f6cec554918fec64c179") sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c", @ANYRESOCT=r3, @ANYBLOB="1a1d5f26e9a6b52ec76fc0e0291aafa6f841d6beee91b22e559f9dbd1c867cb619704705e4f3e76bd8b9306b449753850208c2d515dda7f4bc1ea4c44185db1b24fe1da8bbd623cca1f3d1a3249a1b2ece04aed057349bfb2de4b3"], 0x1c}}, 0x20000011) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r5 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYRES8=r0], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x3}, 0x18) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x44885}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="28001002f8e57547a91f26bfe4cce215971cc0320100c4990aa784fab13816a84141966178fc82d86d1ee097aa24e319e843fbb504e1939c5a9fa95ab4ec4e698f2a929ad588472ad977a7b2b537b6a47d7654133b8be2ae76b0b9e4a759566e0c4affcebd", @ANYRES16=r8, @ANYBLOB="020027bd7000fddbdf250500000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000300000006000000"], 0x28}}, 0xc000) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x44040008}, 0x4004008) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04000090", @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf2514000000", @ANYRES32=0x0, @ANYBLOB="0c009900040000003c00000008001400", @ANYRES32=r9, @ANYBLOB="0600120109000000"], 0x38}, 0x1, 0x0, 0x0, 0x4044084}, 0x40000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000002700)={'batadv_slave_1\x00'}) 0s ago: executing program 3 (id=326): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. [ 33.172962][ T29] audit: type=1400 audit(1749099350.140:62): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.174078][ T3305] cgroup: Unknown subsys name 'net' [ 33.195939][ T29] audit: type=1400 audit(1749099350.140:63): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.223679][ T29] audit: type=1400 audit(1749099350.170:64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.379593][ T3305] cgroup: Unknown subsys name 'cpuset' [ 33.385860][ T3305] cgroup: Unknown subsys name 'rlimit' [ 33.557104][ T29] audit: type=1400 audit(1749099350.520:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.580835][ T29] audit: type=1400 audit(1749099350.520:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.601491][ T29] audit: type=1400 audit(1749099350.520:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.616812][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.621866][ T29] audit: type=1400 audit(1749099350.520:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.647095][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.650695][ T29] audit: type=1400 audit(1749099350.540:69): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.684465][ T29] audit: type=1400 audit(1749099350.540:70): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.707815][ T29] audit: type=1400 audit(1749099350.600:71): avc: denied { relabelto } for pid=3309 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.929870][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 34.967725][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 34.994219][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.042897][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 35.064152][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 35.100474][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.107579][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.114998][ T3317] bridge_slave_0: entered allmulticast mode [ 35.121535][ T3317] bridge_slave_0: entered promiscuous mode [ 35.130704][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.137876][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.145099][ T3317] bridge_slave_1: entered allmulticast mode [ 35.151893][ T3317] bridge_slave_1: entered promiscuous mode [ 35.158103][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.165315][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.172683][ T3315] bridge_slave_0: entered allmulticast mode [ 35.179227][ T3315] bridge_slave_0: entered promiscuous mode [ 35.207820][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.215027][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.222431][ T3315] bridge_slave_1: entered allmulticast mode [ 35.228992][ T3315] bridge_slave_1: entered promiscuous mode [ 35.263794][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.271068][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.278296][ T3316] bridge_slave_0: entered allmulticast mode [ 35.284804][ T3316] bridge_slave_0: entered promiscuous mode [ 35.294060][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.301228][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.308342][ T3316] bridge_slave_1: entered allmulticast mode [ 35.314852][ T3316] bridge_slave_1: entered promiscuous mode [ 35.322350][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.337613][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.354735][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.370576][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.380670][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.405183][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.419315][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.426433][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.433668][ T3321] bridge_slave_0: entered allmulticast mode [ 35.440325][ T3321] bridge_slave_0: entered promiscuous mode [ 35.471656][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.478935][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.486295][ T3321] bridge_slave_1: entered allmulticast mode [ 35.493253][ T3321] bridge_slave_1: entered promiscuous mode [ 35.499579][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.506743][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.513989][ T3322] bridge_slave_0: entered allmulticast mode [ 35.520627][ T3322] bridge_slave_0: entered promiscuous mode [ 35.527746][ T3317] team0: Port device team_slave_0 added [ 35.534197][ T3316] team0: Port device team_slave_0 added [ 35.540601][ T3315] team0: Port device team_slave_0 added [ 35.547031][ T3316] team0: Port device team_slave_1 added [ 35.563594][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.570861][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.578044][ T3322] bridge_slave_1: entered allmulticast mode [ 35.584663][ T3322] bridge_slave_1: entered promiscuous mode [ 35.591607][ T3317] team0: Port device team_slave_1 added [ 35.607270][ T3315] team0: Port device team_slave_1 added [ 35.619388][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.653270][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.660288][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.688233][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.700632][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.710366][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.717316][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.743585][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.755900][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.766535][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.775976][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.783344][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.809315][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.820664][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.827651][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.853745][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.873660][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.880735][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.906729][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.923183][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.930211][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.956248][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.971531][ T3321] team0: Port device team_slave_0 added [ 35.994910][ T3322] team0: Port device team_slave_0 added [ 36.005999][ T3321] team0: Port device team_slave_1 added [ 36.022600][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.029616][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.055594][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.067847][ T3322] team0: Port device team_slave_1 added [ 36.086876][ T3315] hsr_slave_0: entered promiscuous mode [ 36.092990][ T3315] hsr_slave_1: entered promiscuous mode [ 36.100052][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.107022][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.133102][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.150004][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.156977][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.183235][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.206748][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.213790][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.239804][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.257948][ T3317] hsr_slave_0: entered promiscuous mode [ 36.264118][ T3317] hsr_slave_1: entered promiscuous mode [ 36.269997][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.277624][ T3317] Cannot create hsr debugfs directory [ 36.290856][ T3316] hsr_slave_0: entered promiscuous mode [ 36.297033][ T3316] hsr_slave_1: entered promiscuous mode [ 36.303009][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.310585][ T3316] Cannot create hsr debugfs directory [ 36.383724][ T3322] hsr_slave_0: entered promiscuous mode [ 36.389859][ T3322] hsr_slave_1: entered promiscuous mode [ 36.395778][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.403449][ T3322] Cannot create hsr debugfs directory [ 36.411325][ T3321] hsr_slave_0: entered promiscuous mode [ 36.417520][ T3321] hsr_slave_1: entered promiscuous mode [ 36.423499][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.431138][ T3321] Cannot create hsr debugfs directory [ 36.613528][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.622944][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.631849][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.643401][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.668028][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.676871][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.689136][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.697873][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.729162][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.745963][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.755150][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.770866][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.790760][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.800854][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.809636][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.818346][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.844567][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.878632][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.888045][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.909668][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.920623][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.933693][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.946271][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.958549][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.965677][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.986882][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.999865][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.007085][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.017657][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.037679][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.048763][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.059239][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.067801][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.075002][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.087991][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.095277][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.112423][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.119664][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.138692][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.145799][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.166666][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.173817][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.197349][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.204575][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.233869][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.244481][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.266340][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.302374][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.328635][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.347196][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.354378][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.371730][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.378871][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.392735][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.410980][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.495935][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.514075][ T3316] veth0_vlan: entered promiscuous mode [ 37.540801][ T3316] veth1_vlan: entered promiscuous mode [ 37.557213][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.573315][ T3316] veth0_macvtap: entered promiscuous mode [ 37.592836][ T3316] veth1_macvtap: entered promiscuous mode [ 37.627325][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.655974][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.666528][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.685604][ T3317] veth0_vlan: entered promiscuous mode [ 37.695466][ T3315] veth0_vlan: entered promiscuous mode [ 37.703872][ T3317] veth1_vlan: entered promiscuous mode [ 37.716713][ T3316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.725515][ T3316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.734311][ T3316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.743201][ T3316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.763166][ T3315] veth1_vlan: entered promiscuous mode [ 37.787505][ T3322] veth0_vlan: entered promiscuous mode [ 37.794383][ T3317] veth0_macvtap: entered promiscuous mode [ 37.805156][ T3317] veth1_macvtap: entered promiscuous mode [ 37.821969][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.827439][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.844701][ T3322] veth1_vlan: entered promiscuous mode [ 37.858691][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.886277][ T3315] veth0_macvtap: entered promiscuous mode [ 37.894667][ T3317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.903559][ T3317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.912354][ T3317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.921094][ T3317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.935444][ T3315] veth1_macvtap: entered promiscuous mode [ 37.952076][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.971191][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.995840][ T3322] veth0_macvtap: entered promiscuous mode [ 38.013797][ T3315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.022607][ T3315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.031895][ T3315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.040982][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.055673][ T3322] veth1_macvtap: entered promiscuous mode [ 38.060096][ T3452] Falling back ldisc for ttyS3. [ 38.109715][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.118618][ T3321] veth0_vlan: entered promiscuous mode [ 38.131405][ T3321] veth1_vlan: entered promiscuous mode [ 38.157754][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.196206][ T3322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.205120][ T3322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.213912][ T3322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.223016][ T3322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.240768][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 38.240786][ T29] audit: type=1400 audit(1749099355.210:107): avc: denied { block_suspend } for pid=3464 comm="syz.4.5" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.290142][ T3321] veth0_macvtap: entered promiscuous mode [ 38.300660][ T29] audit: type=1400 audit(1749099355.270:108): avc: denied { allowed } for pid=3464 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.322479][ T3321] veth1_macvtap: entered promiscuous mode [ 38.337829][ T29] audit: type=1400 audit(1749099355.300:109): avc: denied { create } for pid=3464 comm="syz.4.5" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.360987][ T29] audit: type=1400 audit(1749099355.300:110): avc: denied { map } for pid=3464 comm="syz.4.5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.384971][ T29] audit: type=1400 audit(1749099355.300:111): avc: denied { read write } for pid=3464 comm="syz.4.5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.427440][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.440957][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.456598][ T3321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.465822][ T3321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.474892][ T3321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.484167][ T3321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.498029][ T3478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 38.510732][ T29] audit: type=1400 audit(1749099355.420:112): avc: denied { mounton } for pid=3467 comm="syz.0.7" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.533063][ T29] audit: type=1400 audit(1749099355.460:113): avc: denied { write } for pid=3474 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.553480][ T29] audit: type=1400 audit(1749099355.460:114): avc: denied { read } for pid=3474 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.573615][ T29] audit: type=1326 audit(1749099355.460:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3474 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33822ee929 code=0x7ffc0000 [ 38.596990][ T29] audit: type=1326 audit(1749099355.460:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3474 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33822ee929 code=0x7ffc0000 [ 38.682793][ T3482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 38.719758][ T3486] loop2: detected capacity change from 0 to 2048 [ 38.800691][ T3486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.831949][ T3499] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.844359][ T3493] Falling back ldisc for ttyS3. [ 38.851450][ T3486] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.875507][ T3502] loop0: detected capacity change from 0 to 2048 [ 38.889289][ T23] hid-generic 0000:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 38.901712][ T3502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.904925][ T23] hid-generic 0000:FFFFFFFF:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 38.974156][ T3509] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 39.036085][ T3508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 39.118070][ T3512] fido_id[3512]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.378592][ T3514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 39.399330][ T3514] loop4: detected capacity change from 0 to 1764 [ 39.409565][ T3514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 39.414877][ T3508] syz.3.14 (3508) used greatest stack depth: 10088 bytes left [ 39.487124][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.735692][ T3526] loop4: detected capacity change from 0 to 512 [ 39.965631][ T3530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 40.108277][ T3533] loop3: detected capacity change from 0 to 1764 [ 40.222743][ T3526] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.236145][ T3526] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.635247][ T3526] EXT4-fs (loop4): 1 truncate cleaned up [ 40.641947][ T3526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.736942][ T3551] Zero length message leads to an empty skb [ 41.768049][ T3551] loop3: detected capacity change from 0 to 512 [ 41.800942][ T3551] ======================================================= [ 41.800942][ T3551] WARNING: The mand mount option has been deprecated and [ 41.800942][ T3551] and is ignored by this kernel. Remove the mand [ 41.800942][ T3551] option from the mount to silence this warning. [ 41.800942][ T3551] ======================================================= [ 42.042013][ T3551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.072843][ T3551] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.097858][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.117270][ T3486] syz.2.9 (3486) used greatest stack depth: 5880 bytes left [ 42.163745][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.187108][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.339234][ T3573] loop3: detected capacity change from 0 to 2048 [ 42.366650][ T3573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.394060][ T3577] loop2: detected capacity change from 0 to 2048 [ 42.429783][ T3569] infiniband syz!: set active [ 42.434639][ T3569] infiniband syz!: added team_slave_0 [ 42.472137][ T3569] RDS/IB: syz!: added [ 42.523660][ T3569] smc: adding ib device syz! with port count 1 [ 42.932101][ T3569] smc: ib device syz! port 1 has pnetid [ 43.526597][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.035071][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 44.035089][ T29] audit: type=1326 audit(1749099361.000:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3604 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 44.093348][ T3605] loop3: detected capacity change from 0 to 512 [ 44.180365][ T3605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.193985][ T29] audit: type=1326 audit(1749099361.040:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3604 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 44.217342][ T29] audit: type=1326 audit(1749099361.040:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3604 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 44.240807][ T29] audit: type=1326 audit(1749099361.040:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3604 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 44.264193][ T29] audit: type=1326 audit(1749099361.040:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3604 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 44.287374][ T29] audit: type=1326 audit(1749099361.040:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3604 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 44.301935][ T3605] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.310794][ T29] audit: type=1326 audit(1749099361.040:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3604 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 44.339652][ T3607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 44.344348][ T29] audit: type=1326 audit(1749099361.040:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3604 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 44.376359][ T29] audit: type=1326 audit(1749099361.040:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3604 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 44.400086][ T29] audit: type=1326 audit(1749099361.040:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3604 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 44.498572][ T3613] loop4: detected capacity change from 0 to 512 [ 44.533980][ T3613] EXT4-fs (loop4): 1 orphan inode deleted [ 44.549349][ T56] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 44.566012][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.575822][ T3613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.589754][ T3613] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.599746][ T3618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 44.601518][ T3613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.663137][ T3622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 44.674446][ T3613] xt_CT: You must specify a L4 protocol and not use inversions on it [ 44.810100][ T3631] loop3: detected capacity change from 0 to 1024 [ 44.825315][ T3629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 44.836644][ T3631] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 44.847654][ T3631] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 44.879504][ T3631] JBD2: no valid journal superblock found [ 44.883227][ T3629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 44.885313][ T3631] EXT4-fs (loop3): Could not load journal inode [ 44.939554][ T3631] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 45.123435][ T3637] Falling back ldisc for ttyS3. [ 45.158631][ T3644] loop3: detected capacity change from 0 to 512 [ 45.189873][ T3637] loop2: detected capacity change from 0 to 2048 [ 45.196287][ T3644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.270161][ T3644] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.400611][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.175025][ T36] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 46.189300][ T3663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 46.280351][ T36] hid-generic 0000:FFFFFFFF:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.371473][ T3666] fido_id[3666]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 46.401235][ T3668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 46.451963][ T3672] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 46.942614][ T3682] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 47.129580][ T3684] netlink: 'syz.1.72': attribute type 1 has an invalid length. [ 47.137199][ T3684] netlink: 224 bytes leftover after parsing attributes in process `syz.1.72'. [ 47.226957][ T3384] hid-generic 0000:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 47.250073][ T3699] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu) failed with errno=-22 [ 47.266490][ T3384] hid-generic 0000:FFFFFFFF:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 47.309977][ T3703] loop3: detected capacity change from 0 to 2048 [ 47.533517][ T3703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.119360][ T3725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 48.137170][ T3725] loop4: detected capacity change from 0 to 1764 [ 48.196726][ T3725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 48.916147][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.158865][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 49.158883][ T29] audit: type=1326 audit(1749099366.120:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f33822ed3df code=0x7ffc0000 [ 49.188138][ T29] audit: type=1326 audit(1749099366.120:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f33822ee9b7 code=0x7ffc0000 [ 49.211259][ T29] audit: type=1326 audit(1749099366.120:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33822ed290 code=0x7ffc0000 [ 49.234675][ T29] audit: type=1326 audit(1749099366.120:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f33822ed58a code=0x7ffc0000 [ 49.287721][ T3743] lo speed is unknown, defaulting to 1000 [ 49.307632][ T3743] lo speed is unknown, defaulting to 1000 [ 49.379484][ T3745] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 49.438937][ T29] audit: type=1326 audit(1749099366.230:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33822ee929 code=0x7ffc0000 [ 49.462291][ T29] audit: type=1326 audit(1749099366.230:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33822ee929 code=0x7ffc0000 [ 49.485560][ T29] audit: type=1326 audit(1749099366.230:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33822ee929 code=0x7ffc0000 [ 49.508847][ T29] audit: type=1326 audit(1749099366.240:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33822ee929 code=0x7ffc0000 [ 49.532090][ T29] audit: type=1326 audit(1749099366.240:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33822ee929 code=0x7ffc0000 [ 49.555432][ T29] audit: type=1326 audit(1749099366.240:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f33822ee929 code=0x7ffc0000 [ 49.673775][ T3743] lo speed is unknown, defaulting to 1000 [ 49.755227][ T3743] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 49.804221][ T3757] loop4: detected capacity change from 0 to 512 [ 49.821967][ T3743] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 49.865637][ T3757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.908984][ T3743] lo speed is unknown, defaulting to 1000 [ 49.920952][ T3757] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.959154][ T3743] lo speed is unknown, defaulting to 1000 [ 49.979095][ T3743] lo speed is unknown, defaulting to 1000 [ 49.988456][ T3757] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 50.010968][ T3743] lo speed is unknown, defaulting to 1000 [ 50.032024][ T3743] lo speed is unknown, defaulting to 1000 [ 50.038120][ T3765] netlink: 'syz.3.93': attribute type 1 has an invalid length. [ 50.045827][ T3765] netlink: 224 bytes leftover after parsing attributes in process `syz.3.93'. [ 50.067774][ T3757] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 50.080141][ T3757] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.080141][ T3757] [ 50.089833][ T3757] EXT4-fs (loop4): Total free blocks count 0 [ 50.095922][ T3757] EXT4-fs (loop4): Free/Dirty block details [ 50.101862][ T3757] EXT4-fs (loop4): free_blocks=39626 [ 50.107179][ T3757] EXT4-fs (loop4): dirty_blocks=1 [ 50.112567][ T3757] EXT4-fs (loop4): Block reservation details [ 50.118569][ T3757] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 50.232683][ T3384] hid-generic 0000:FFFFFFFF:0000.0004: unknown main item tag 0x0 [ 50.246459][ T3384] hid-generic 0000:FFFFFFFF:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.281743][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.296956][ T3771] fido_id[3771]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.316332][ T3778] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.441197][ T3778] netlink: 40 bytes leftover after parsing attributes in process `syz.0.101'. [ 50.454089][ T3790] loop4: detected capacity change from 0 to 512 [ 50.460803][ T3790] ext4: Bad value for 'debug_want_extra_isize' [ 50.545376][ T3793] syz!: rxe_newlink: already configured on team_slave_0 [ 50.596610][ T3796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 50.611594][ T3796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 50.772967][ T3803] netlink: 'syz.3.107': attribute type 1 has an invalid length. [ 50.780779][ T3803] netlink: 224 bytes leftover after parsing attributes in process `syz.3.107'. [ 50.795655][ T3803] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu) failed with errno=-22 [ 51.034268][ T3809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 51.408256][ T3823] lo speed is unknown, defaulting to 1000 [ 52.225901][ T3834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 53.273715][ T3834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 54.960626][ T3836] lo speed is unknown, defaulting to 1000 [ 55.337939][ T3834] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 55.347485][ T3834] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 55.641049][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 55.641063][ T29] audit: type=1326 audit(1749099372.610:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 55.747870][ T29] audit: type=1326 audit(1749099372.640:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 55.771329][ T29] audit: type=1326 audit(1749099372.640:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 55.794594][ T29] audit: type=1326 audit(1749099372.640:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 55.817881][ T29] audit: type=1326 audit(1749099372.640:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 55.842142][ T29] audit: type=1326 audit(1749099372.670:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 55.865471][ T29] audit: type=1326 audit(1749099372.670:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 55.888844][ T29] audit: type=1326 audit(1749099372.670:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 55.912243][ T29] audit: type=1326 audit(1749099372.670:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 55.935725][ T29] audit: type=1326 audit(1749099372.670:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 56.003960][ T3843] lo speed is unknown, defaulting to 1000 [ 56.271432][ T3847] lo speed is unknown, defaulting to 1000 [ 56.282526][ T3853] siw: device registration error -23 [ 56.301501][ T3856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 56.389077][ T3859] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 56.413757][ T3856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 56.461638][ T3861] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 56.469511][ T3861] netlink: 224 bytes leftover after parsing attributes in process `syz.1.129'. [ 56.489357][ T3861] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu) failed with errno=-22 [ 56.548517][ T3867] wireguard0: entered promiscuous mode [ 56.554365][ T3867] wireguard0: entered allmulticast mode [ 56.577136][ T10] hid-generic 0000:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 56.586617][ T10] hid-generic 0000:FFFFFFFF:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.635734][ T3871] fido_id[3871]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.743383][ T3863] lo speed is unknown, defaulting to 1000 [ 56.949338][ T3881] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 57.101761][ T3890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 57.114216][ T3887] wireguard0: entered promiscuous mode [ 57.119752][ T3887] wireguard0: entered allmulticast mode [ 57.145506][ T3890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 57.256518][ T3885] lo speed is unknown, defaulting to 1000 [ 57.268375][ T3896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 57.321977][ T3896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 57.352001][ T3898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 57.363607][ T3898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 57.603061][ T3908] netlink: 'syz.4.147': attribute type 1 has an invalid length. [ 57.610795][ T3908] netlink: 224 bytes leftover after parsing attributes in process `syz.4.147'. [ 57.621025][ T3908] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu) failed with errno=-22 [ 58.742811][ T3940] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 58.907941][ T3945] lo speed is unknown, defaulting to 1000 [ 59.110232][ T3958] siw: device registration error -23 [ 59.216044][ T3961] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 59.263776][ T3965] wireguard0: entered promiscuous mode [ 59.269425][ T3965] wireguard0: entered allmulticast mode [ 59.286139][ T3966] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 59.485477][ T3978] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 59.506474][ T3978] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu) failed with errno=-22 [ 59.872453][ T4006] wireguard0: entered promiscuous mode [ 59.878165][ T4006] wireguard0: entered allmulticast mode [ 59.885194][ T4012] netlink: 'syz.2.179': attribute type 13 has an invalid length. [ 59.974167][ T36] hid-generic 0000:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 59.986678][ T36] hid-generic 0000:FFFFFFFF:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 60.232810][ T4012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.249203][ T3999] lo speed is unknown, defaulting to 1000 [ 60.551837][ T4015] Falling back ldisc for ttyS3. [ 60.637321][ T4027] bridge_slave_0: left allmulticast mode [ 60.643337][ T4027] bridge_slave_0: left promiscuous mode [ 60.649235][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.701837][ T4027] bridge_slave_1: left allmulticast mode [ 60.707681][ T4027] bridge_slave_1: left promiscuous mode [ 60.713551][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.749334][ T4027] bond0: (slave bond_slave_0): Releasing backup interface [ 60.791568][ T4027] bond0: (slave bond_slave_1): Releasing backup interface [ 60.825904][ T4027] team0: Port device team_slave_0 removed [ 60.844519][ T4027] team0: Port device team_slave_1 removed [ 60.860561][ T4027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.868109][ T4027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.902039][ T4027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.909649][ T4027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.929162][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 60.929178][ T29] audit: type=1326 audit(1749099377.900:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4035 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab003e929 code=0x7ffc0000 [ 61.034528][ T29] audit: type=1326 audit(1749099377.940:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4035 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ab003e929 code=0x7ffc0000 [ 61.058079][ T29] audit: type=1326 audit(1749099377.940:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4035 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab003e929 code=0x7ffc0000 [ 61.081447][ T29] audit: type=1326 audit(1749099377.940:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4035 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab003e929 code=0x7ffc0000 [ 61.105578][ T29] audit: type=1326 audit(1749099377.940:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4035 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ab003e929 code=0x7ffc0000 [ 61.129545][ T29] audit: type=1326 audit(1749099377.940:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4035 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab003e929 code=0x7ffc0000 [ 61.153633][ T29] audit: type=1326 audit(1749099377.940:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4035 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab003e929 code=0x7ffc0000 [ 61.177530][ T29] audit: type=1326 audit(1749099377.940:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4035 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7ab003e929 code=0x7ffc0000 [ 61.201126][ T29] audit: type=1326 audit(1749099377.940:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4035 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab003e929 code=0x7ffc0000 [ 61.224933][ T29] audit: type=1326 audit(1749099377.940:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4035 comm="syz.1.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ab003e929 code=0x7ffc0000 [ 61.312426][ T4039] __nla_validate_parse: 11 callbacks suppressed [ 61.312522][ T4039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 61.351756][ T4039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 61.402956][ T4041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'. [ 61.429604][ T4041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'. [ 61.452594][ T4043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 61.490820][ T4043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 61.563207][ T4045] bridge_slave_0: left allmulticast mode [ 61.568992][ T4045] bridge_slave_0: left promiscuous mode [ 61.574784][ T4045] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.590149][ T4047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 61.630857][ T4045] bridge_slave_1: left allmulticast mode [ 61.636708][ T4045] bridge_slave_1: left promiscuous mode [ 61.642557][ T4045] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.675198][ T4045] bond0: (slave bond_slave_0): Releasing backup interface [ 61.686128][ T4045] bond0: (slave bond_slave_1): Releasing backup interface [ 61.699749][ T4045] team0: Port device team_slave_0 removed [ 61.714833][ T4045] team0: Port device team_slave_1 removed [ 61.730994][ T4045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.738477][ T4045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.768714][ T4045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.776344][ T4045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.051995][ T1039] hid-generic 0000:FFFFFFFF:0000.0007: unknown main item tag 0x0 [ 62.070554][ T1039] hid-generic 0000:FFFFFFFF:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 62.193556][ T4055] lo speed is unknown, defaulting to 1000 [ 62.761096][ T4082] wireguard0: entered promiscuous mode [ 62.766952][ T4082] wireguard0: entered allmulticast mode [ 63.263022][ T4094] netlink: 'syz.1.218': attribute type 1 has an invalid length. [ 63.270847][ T4094] netlink: 224 bytes leftover after parsing attributes in process `syz.1.218'. [ 63.407147][ T4097] bridge_slave_0: left allmulticast mode [ 63.413022][ T4097] bridge_slave_0: left promiscuous mode [ 63.418763][ T4097] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.457867][ T4099] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu) failed with errno=-22 [ 63.532306][ T4097] bridge_slave_1: left allmulticast mode [ 63.538029][ T4097] bridge_slave_1: left promiscuous mode [ 63.543795][ T4097] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.716653][ T4097] bond0: (slave bond_slave_0): Releasing backup interface [ 63.764085][ T4097] bond0: (slave bond_slave_1): Releasing backup interface [ 63.999626][ T4097] team0: Port device team_slave_0 removed [ 64.551516][ T4097] team0: Port device team_slave_1 removed [ 64.576028][ T4097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.583512][ T4097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.712584][ T4097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.720193][ T4097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.815785][ T1039] lo speed is unknown, defaulting to 1000 [ 64.981927][ T3384] hid-generic 0000:FFFFFFFF:0000.0008: unknown main item tag 0x0 [ 65.005326][ T3384] hid-generic 0000:FFFFFFFF:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.058253][ T4119] fido_id[4119]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.313249][ T3392] syz!: Port: 1 Link DOWN [ 65.346564][ T4098] lo speed is unknown, defaulting to 1000 [ 65.560643][ T4128] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 66.007758][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 66.007775][ T29] audit: type=1400 audit(1749099382.970:1422): avc: denied { setopt } for pid=4135 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.170394][ T4145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 66.192521][ T4145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 66.257645][ T4149] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 66.517240][ T29] audit: type=1326 audit(1749099383.460:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 66.541918][ T29] audit: type=1326 audit(1749099383.460:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 66.565254][ T29] audit: type=1326 audit(1749099383.460:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 66.588539][ T29] audit: type=1326 audit(1749099383.460:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 66.612797][ T29] audit: type=1326 audit(1749099383.460:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 66.637365][ T29] audit: type=1326 audit(1749099383.460:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 66.661136][ T29] audit: type=1326 audit(1749099383.460:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 66.684544][ T29] audit: type=1326 audit(1749099383.460:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 66.707918][ T29] audit: type=1326 audit(1749099383.460:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fa3e3e9e929 code=0x7ffc0000 [ 67.097757][ T4161] lo speed is unknown, defaulting to 1000 [ 67.471995][ T4147] lo speed is unknown, defaulting to 1000 [ 67.760897][ T4188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 67.896146][ T4192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 67.925667][ T4185] netlink: 'syz.4.247': attribute type 1 has an invalid length. [ 67.933400][ T4185] netlink: 224 bytes leftover after parsing attributes in process `syz.4.247'. [ 67.991005][ T4192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 68.002449][ T4185] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu) failed with errno=-22 [ 68.232119][ T3396] hid-generic 0000:FFFFFFFF:0000.0009: unknown main item tag 0x0 [ 68.300260][ T3396] hid-generic 0000:FFFFFFFF:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 68.362734][ T4211] wireguard0: entered promiscuous mode [ 68.368286][ T4211] wireguard0: entered allmulticast mode [ 68.535777][ T4222] bridge_slave_0: left allmulticast mode [ 68.541698][ T4222] bridge_slave_0: left promiscuous mode [ 68.547534][ T4222] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.558628][ T4222] bridge_slave_1: left allmulticast mode [ 68.564379][ T4222] bridge_slave_1: left promiscuous mode [ 68.570211][ T4222] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.590865][ T4222] bond0: (slave bond_slave_0): Releasing backup interface [ 68.607443][ T4222] bond0: (slave bond_slave_1): Releasing backup interface [ 68.620025][ T4222] team0: Port device team_slave_0 removed [ 68.629980][ T4222] team0: Port device team_slave_1 removed [ 68.637183][ T4222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.644785][ T4222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.654109][ T4222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.661630][ T4222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.739641][ T4232] netlink: 'syz.4.261': attribute type 13 has an invalid length. [ 69.211210][ T4232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.423441][ T4251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 69.591566][ T4258] wireguard0: entered promiscuous mode [ 69.597103][ T4258] wireguard0: entered allmulticast mode [ 69.605747][ T3447] hid-generic 0000:FFFFFFFF:0000.000A: unknown main item tag 0x0 [ 69.620158][ T3447] hid-generic 0000:FFFFFFFF:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 69.758879][ T4265] wireguard0: entered promiscuous mode [ 69.764424][ T4265] wireguard0: entered allmulticast mode [ 69.831828][ T4269] wireguard0: entered promiscuous mode [ 69.837526][ T4269] wireguard0: entered allmulticast mode [ 70.438393][ T4289] lo speed is unknown, defaulting to 1000 [ 72.254054][ T4318] netlink: 'syz.3.292': attribute type 21 has an invalid length. [ 72.266486][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 72.272683][ T29] audit: type=1326 audit(1749099389.230:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 72.296160][ T29] audit: type=1326 audit(1749099389.230:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 72.360323][ T29] audit: type=1326 audit(1749099389.270:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 72.384050][ T29] audit: type=1326 audit(1749099389.270:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 72.407566][ T29] audit: type=1326 audit(1749099389.270:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 72.430998][ T29] audit: type=1326 audit(1749099389.290:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 72.454341][ T29] audit: type=1326 audit(1749099389.290:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 72.478412][ T29] audit: type=1326 audit(1749099389.290:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 72.509508][ T29] audit: type=1400 audit(1749099389.400:1528): avc: denied { create } for pid=4312 comm="syz.3.292" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 72.530341][ T29] audit: type=1326 audit(1749099389.470:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f984d5be929 code=0x7ffc0000 [ 72.556587][ T4313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.292'. [ 72.615957][ T4332] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 72.780577][ T4337] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 73.180813][ T4350] siw: device registration error -23 [ 73.568531][ T4367] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 73.580481][ T4360] lo speed is unknown, defaulting to 1000 [ 73.702773][ T4370] netlink: 'syz.1.308': attribute type 13 has an invalid length. [ 73.764201][ T4373] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 74.063159][ T4370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.512054][ T4385] netlink: 'syz.3.314': attribute type 1 has an invalid length. [ 74.519882][ T4385] netlink: 224 bytes leftover after parsing attributes in process `syz.3.314'. [ 74.640857][ T4385] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu) failed with errno=-22 [ 74.802450][ T4388] netlink: 'syz.2.315': attribute type 1 has an invalid length. [ 74.810253][ T4388] netlink: 224 bytes leftover after parsing attributes in process `syz.2.315'. [ 74.932896][ T4398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 74.997914][ T10] hid-generic 0000:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 75.017351][ T10] hid-generic 0000:FFFFFFFF:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.053772][ T4405] fido_id[4405]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 75.119179][ T4414] syz!: rxe_newlink: already configured on team_slave_0 [ 75.170156][ T4411] Falling back ldisc for ttyS3. [ 75.281902][ T3316] ================================================================== [ 75.290062][ T3316] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 75.298705][ T3316] [ 75.301056][ T3316] read-write to 0xffff888100872de0 of 8 bytes by task 4415 on cpu 1: [ 75.309138][ T3316] shmem_add_to_page_cache+0x37f/0x490 [ 75.314662][ T3316] shmem_get_folio_gfp+0x4e8/0xd60 [ 75.319818][ T3316] shmem_write_begin+0xa8/0x190 [ 75.324717][ T3316] generic_perform_write+0x181/0x490 [ 75.330025][ T3316] shmem_file_write_iter+0xc5/0xf0 [ 75.335158][ T3316] __kernel_write_iter+0x253/0x4c0 [ 75.340299][ T3316] dump_user_range+0x407/0x8c0 [ 75.345520][ T3316] elf_core_dump+0x1dc2/0x1f80 [ 75.350332][ T3316] do_coredump+0x1dfd/0x27b0 [ 75.354951][ T3316] get_signal+0xd85/0xf70 [ 75.359312][ T3316] arch_do_signal_or_restart+0x96/0x480 [ 75.364959][ T3316] irqentry_exit_to_user_mode+0x5e/0xa0 [ 75.370624][ T3316] irqentry_exit+0x12/0x50 [ 75.375093][ T3316] exc_general_protection+0x15b/0x1f0 [ 75.380506][ T3316] asm_exc_general_protection+0x26/0x30 [ 75.386080][ T3316] [ 75.388424][ T3316] read to 0xffff888100872de0 of 8 bytes by task 3316 on cpu 0: [ 75.395979][ T3316] shmem_getattr+0x68/0x200 [ 75.400513][ T3316] vfs_getattr_nosec+0x143/0x1e0 [ 75.405498][ T3316] vfs_statx+0x113/0x390 [ 75.409939][ T3316] vfs_fstatat+0x115/0x170 [ 75.414393][ T3316] __se_sys_newfstatat+0x55/0x260 [ 75.419535][ T3316] __x64_sys_newfstatat+0x55/0x70 [ 75.424603][ T3316] x64_sys_call+0x2c22/0x2fb0 [ 75.429325][ T3316] do_syscall_64+0xd2/0x200 [ 75.433969][ T3316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.439970][ T3316] [ 75.442314][ T3316] value changed: 0x000000000000042a -> 0x000000000000042c [ 75.449535][ T3316] [ 75.451876][ T3316] Reported by Kernel Concurrency Sanitizer on: [ 75.458139][ T3316] CPU: 0 UID: 0 PID: 3316 Comm: syz-executor Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 75.470411][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.480488][ T3316] ================================================================== [ 75.649546][ T4434] vhci_hcd: default hub control req: 800f v0000 i0000 l31125