last executing test programs: 10m35.474592197s ago: executing program 4 (id=1393): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x8000000000000001, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffd}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r3, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000005, 0x4012831, r0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10m35.462427068s ago: executing program 2 (id=1394): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000040)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r6) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='.\x00') ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000d00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004811}, 0x40000) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='rxrpc_conn\x00', r9, 0x0, 0x4}, 0x18) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') ioctl$BTRFS_IOC_BALANCE(r10, 0x8008b70d, 0x200000000000000) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x91, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) close(r1) 10m35.429804583s ago: executing program 2 (id=1395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x91, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) close(r0) 10m35.37380568s ago: executing program 1 (id=1396): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="f2ffffff00001000b7080000000000147b8af80700000000bfa200000000000007020000f8ffffc6c3d223747f94b4f8c3e5fb05adffb70300000000a800570000009500"/79], 0x0, 0x8ed, 0x0, 0x0, 0x0, 0xd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x29, 0x5, 0xff) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x158, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x10, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = epoll_create(0x7ff40000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r5}, 0x18) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) epoll_wait(r4, 0x0, 0x14e, 0xfffffffd) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000000)={0x1}) getsockopt$inet_mptcp_buf(r0, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x90205e, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$eJzs3b9rVFkUAOAzmcmvbSYsCwvLLjuwLGw1JIHtsyy7bNigYhgkIsGJmUjIhICBgBZJrAQrG0vLdBFBCzv9HwQbG7ERS9NZSJ4kL0xmzEQTMfMk833NPbx7znv33vDeyxRz5/LPiwuzS8tzW1uvY2AgF4Wxq9tJkouh6Il8pNYDADhN3iVJvE1SWY8FAOgM738A6D6Hvf//60nb3rQ5l8XYAICT8eWf/+9OPXlZrY39eYTUpL8Rvpg+/hgBgK9rcuri/9tPfx8cj0d3IhZvrVRWKmmb9v81F/NRj1oMRzHeRyQNafzv+MQ/w6UdgxGVxbW9+rWVSr61fiSKMRRx4czB+pFSqrW+N75rrh+NYvzQ/vqjbev74o/fmurLUYxnV2Ip6jG78y9JU/3qSKn099mJj+r7d/NiI5/p3wcAAAAAAAAAAAAAAAAAAAAAgNOpXGoYard/T7l8WH9af/T9gfb357m9W1+InwpxM9vZAwAAAAAAAAAAAAAAAAAAwLdh+fqNhWq9XrvWCGbOz3/feuRzQa5NV37v/Mc5T9cEOwtzgpf4NSJOehYPN2vPN6YvTWa/mB0M2q/qg8wHNvOJnJ6I2A1+vDdWfbz66s3BnFhvupcL6X1bradtX/PDotThhxMAAAAAAAAAAAAAAAAAAHSZ/a8BH5aRdHZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCB/d//P3bQ1ziyOZierNH1y0Bzctp5v+W6ufUMJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNf6EAAA//9rIKjm") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r8, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r9) 10m35.288958551s ago: executing program 2 (id=1397): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x2200000, &(0x7f0000000740)={[{@noblock_validity}, {}, {@resgid={'resgid', 0x3d, 0xffffffffffffffff}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x2, 0x584, &(0x7f00000008c0)="$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") fsopen(0x0, 0x2000000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYRESDEC], 0x50) open(&(0x7f0000000080)='./file0\x00', 0x40, 0x48) 10m35.076525648s ago: executing program 4 (id=1399): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfe, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x30, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x30}}]}, 0x30}}, 0x0) 10m35.017924066s ago: executing program 4 (id=1401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8d89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r3, 0xa4ff, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) 10m35.017390516s ago: executing program 1 (id=1402): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x6}, 0x20) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) (async) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 10m34.857805166s ago: executing program 1 (id=1403): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000340)=""/105, 0x69, 0x0, &(0x7f00000003c0)=""/96, 0x60}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000005}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000021c0)=@newtaction={0x18, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048810}, 0x20000080) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000a030000000000000000000002"], 0x0, 0x3e, 0x0, 0x1}, 0x28) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f00000014c0)=""/258, 0x102}, {&(0x7f00000001c0)=""/41, 0x29}], 0x3}}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x5db) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 10m34.794224785s ago: executing program 0 (id=1404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) creat(&(0x7f0000000100)='./file0\x00', 0x1) inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x84000100) close_range(r1, 0xffffffffffffffff, 0x2000) 10m34.385980127s ago: executing program 2 (id=1405): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000040)="940910bc996c301c8107070400", 0x28) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)) memfd_create(&(0x7f0000000280)='$\x01\x00\x02\xb4\x8f\x88|\xbf\x9f\xde\x0fA\xd6.\x18g\xee\x1e\xa2\x03\x00\x00\x00\x00\x00\x00\x00M\xe8D\x97NO\x943\xdfn\xf9k\x11\xd0 \x8a{\xf9\xba\x01\xd5Q\xa4u\r\x0fe\xbf\xdb\xe8@\xa58\x89\"\x01\b\xfd\xf1r\xc7\x9a\x0e\b.\xcb4\xa5\x87K\x8e-\xba\xb8\xfbF\xb4\x95t\x99qX\x19D\xbb\xb0W\x95a\b\x12:\xc9BT\xf9\x9e\x00\xc4M\x8fir\xedf\x93\x80\xc1*\xec\x04\x8c>\xd1\x1dJ\x01\x94^TL\xa4\xc2\fw\x89\x02\x00\x00\x00\x00\x00\x00\x00\x8f\xb2\xcf8\xc7y.\x82\x10Y\xad\xd8\x0e\x90;\xa6\xdd\a\xdc\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c\xac\xe7\x19g\xc7\xd9\xffd\xc1Q.S_\x9c\xc5\xef\a\x00\x92pZ\xf6\xd5\xcayt\xf9,s\x88\xec)\x11\x14P}\xfe\xceu\xdc\x9a\xfd\x02\xa96\xe1r\xdc63\xe2\xc5\xda\xbd\xff j+\xa7\t\xf3\x19\xae\xdaG\x06g\x9f :\t\xaa\x1a\x16\x1d\xdb\xc8\xe0\x8dFq\t\xad\b\xf7\xf8\xec=\xa2S8g\xe0\x03\xb8\xb9\"\xd7t0\vG\x14]\xccK\xe8\xa4;\xa7s\"a\xad\am\x06\xcd\xc6M\xe5\xc4\x06\xfae\xd0\xc8\xc1\x87\xa4\xf0\x03(\t\xfe\x04\xc6@\xf7\xf6\x95\xe4\xba{>\xe5T\xb6xh@\x06\x96\xb2\xf8\xbc\xc0\x13\xc5\xed\xd9\x16\x02\xae\x02\x83p\x9fA^\xda\xdcr\xd7BX\xc9\xeb\x00\'\xc9', 0x0) 10m34.385492137s ago: executing program 2 (id=1406): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000007295"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r8 = socket(0x1e, 0x1, 0x0) write$binfmt_misc(r8, &(0x7f0000000340), 0x2000011a) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0xa00, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 10m34.327064505s ago: executing program 1 (id=1407): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) lremovexattr(&(0x7f0000000a40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000180)=@random={'trusted.', 'GPL\x00'}) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="260000000100000000000000d604"], 0x20) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) close(0xffffffffffffffff) open_by_handle_at(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="10000b00020000000b000000000000921cc16dc600090000"], 0x40000) preadv(0xffffffffffffffff, &(0x7f0000003600)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x1, 0xffff) write$binfmt_elf32(r3, &(0x7f0000001a40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x0, 0x0, 0x7f, 0x10001, 0x3, 0x0, 0x9, 0x278, 0x38, 0x3e1, 0x3, 0x2, 0x20, 0x4, 0x5, 0xfff, 0x6}, [{0x1, 0x40ba1e46, 0x5, 0x7b4, 0x0, 0x2, 0x2, 0x4}, {0x6474e551, 0x5, 0x7, 0xc, 0xa16, 0x39, 0xffff, 0x5}, {0x4, 0x9, 0x6, 0x9, 0x0, 0x8, 0x9, 0x2de}, {0x7, 0xeb9, 0x6, 0x7f, 0x10001, 0x3, 0xfff, 0x4}], "6033b741efa88b14ef96492f6c8a6c75e5a1e7f951d00267c699cf5ff03a4f736758a8ad25962ab3b8aee05c899d34f878b9f03363775b8974409cc424d354e04753c34a8679252f2ac287fe1d840338f9f088b97d2daeb609f716f02cf6fd53e0c592e489c494821b928d77140b878275361d537e56932c3b1ab33dd5f3916ca740c316636b6c9126526b1a27887dbb8eb17c10c26b460176bd171686ecfc24e1c05736661475ddde2f45a0df23e8dc214d8cd07103a52ef0586d", ['\x00', '\x00', '\x00']}, 0x473) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x20000400) close_range(r1, 0xffffffffffffffff, 0x0) 10m34.321170605s ago: executing program 0 (id=1408): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="18000000ed07449e000000000000000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x1]}}], 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r1, 0xffffffffffffffff, 0x400000000000000) syz_emit_ethernet(0x0, 0x0, 0x0) 10m34.159467696s ago: executing program 0 (id=1410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$inet(0x2, 0x3, 0x8d) clock_gettime(0x0, &(0x7f0000000280)) r1 = signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0xfffffffffffffffd]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) fcntl$setsig(r2, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff7]}, 0x0, 0x0, 0x8) io_uring_enter(r1, 0x14bf, 0x28a0, 0x1c, &(0x7f0000000080)={[0x2]}, 0x8) rmdir(&(0x7f0000000100)='./control\x00') bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m34.146024538s ago: executing program 1 (id=1411): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x18) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0xa5) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000000000)={0x9, 0x9}) 10m34.085185196s ago: executing program 4 (id=1413): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x48) pipe2$9p(&(0x7f0000000000), 0x80880) 10m34.084572336s ago: executing program 4 (id=1414): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r0, 0x0, 0x1000) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {0x1, 0x6}, [{0x2, 0x7}], {0x4, 0x4}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x2c, 0x3) chdir(&(0x7f0000000040)='./file0\x00') r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) utime(&(0x7f0000000200)='.\x00', 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000280)=""/236, 0xec, 0x0, &(0x7f00000003c0)=""/229, 0xe5}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='kfree\x00', r5}, 0x18) unshare(0x2c040000) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000280)={r8, 0x2, 0x6, @local}, 0x6b) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@ifindex, 0x32, 0x1, 0x7b2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r1, r8, 0x25, 0x6, @val=@netkit={@void, @value=r1, @void, @void, r9}}, 0x1c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xffff, 0x91, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) 10m33.767350867s ago: executing program 2 (id=1417): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xf, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000007295", @ANYRES16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae8}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r8, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)={0x5d8, r8, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x55}}}}, [@NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x3, 0x3, 0x7e6, 0x8, 0x5, 0x8d2e]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0xb, 0x1, 0x5, 0x18, 0x18, 0x2, 0x16, 0x36, 0x6, 0x18, 0x6, 0x48, 0x1, 0x18, 0x9, 0x5, 0x24, 0x16, 0x1, 0x12, 0x36, 0xb, 0x1b, 0x6, 0x1, 0x24, 0x9, 0x24, 0x3, 0x30, 0x2]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x4}, {0x2, 0x3}, {0x6, 0x6}, {0x0, 0x3}, {0x5, 0x3}, {0x2, 0x9}, {0x0, 0x6}, {0x4, 0xa}, {0x2, 0x8}, {0x0, 0xa}, {0x1, 0xa}, {0x6, 0x1}, {0x7, 0xa}, {0x1, 0xa}, {0x2, 0x3}, {0x4, 0x3}, {0x4}, {0x0, 0x8}, {0x0, 0x6}, {0x2, 0x3}, {0x6}, {0x6, 0x8}, {0x3, 0x6}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x6}, {0x4, 0x9}, {0x2, 0x7}, {0x4, 0x6}, {0x2, 0x1}, {0x3, 0x7}, {0x1, 0x4}, {0x4}, {0x3, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x8}, {0x1, 0x4}, {0x7, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x2, 0x9}, {0x4, 0x8}, {0x2, 0x1}, {0x5, 0x2}, {0x6, 0x1}, {0x0, 0x8}, {0x4, 0x9}, {0x0, 0x6}, {0x7, 0x8}, {0x4, 0x1}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x6, 0x5}, {0x1, 0x1}, {0x7, 0x5}, {0x7}, {0x5, 0x8}, {0x1, 0x7}, {0x7, 0x6}, {0x6, 0x2}, {0x5, 0x9}, {0x2, 0x9}, {0x1, 0x4}, {0x3, 0x5}, {0x6, 0x1}, {0x3, 0x5}, {0x6, 0x7}, {0x7, 0x4}, {0x2, 0x5}, {0x2, 0x3}, {0x6, 0x1}, {0x0, 0x4}, {0x1, 0xa}, {0x7, 0x8}, {0x7, 0x3}, {0x3, 0x7}, {0x7, 0x7}, {0x4, 0x4}, {0x2}, {0x4, 0x9}, {0x0, 0x2}, {0x5}, {0x1, 0x9}, {0x6, 0x8}, {0x7, 0x8}, {0x5, 0xa}, {0x6, 0x4}, {0x5, 0x2}, {0x2}, {0x3}, {0x0, 0x7}, {0x1, 0xa}, {0x7, 0x8}, {0x4, 0x1}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x36, 0x24, 0x24, 0x6, 0x1, 0x6, 0x1b, 0x6, 0x18, 0x2, 0x20, 0x6, 0x5, 0x6c, 0x3e, 0x1, 0x30]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x3, 0x8}, {0x0, 0x3}]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x12, 0x12, 0x5, 0x1b, 0xc, 0x1b, 0x5, 0x36, 0x6, 0xb, 0x5, 0x2, 0x3, 0x36, 0x1, 0x1, 0x16, 0x11, 0x24, 0x18, 0x24, 0x9, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xc, 0x12, 0x30, 0x16, 0x1b]}]}]}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3ff, 0x3e8, 0xfff, 0x1, 0x1, 0x200, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x4}, {0x1, 0x8}, {0x3, 0x2}, {0x6}, {0x2, 0x2}, {0x0, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0x5}, {0x4}, {0x3, 0x3}, {0x3, 0x5}, {0x5, 0x7}, {0x3}, {0x5, 0x9}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x1}, {0x7, 0x9}, {0x4, 0x8}, {0x7, 0x8}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x1}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x7, 0xa}, {0x3, 0x1}, {0x0, 0x2}, {0x0, 0x9}, {0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0xfff, 0x400, 0x5, 0x6, 0x8000, 0x2]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3, 0x4}, {0x0, 0x5}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x7, 0xa}, {0x4, 0x9}, {0x4, 0x3}, {0x2, 0x6}, {0x7, 0xa}, {0x4}, {0x0, 0x3}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x2, 0x8000, 0x15, 0x8000, 0x8000, 0x200]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff01, 0x9, 0x1, 0xd986, 0x8, 0x1, 0x5, 0xfffe]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x5}, {0x1, 0x2}, {0x4, 0x5}, {0x4, 0x8}, {0x1, 0x6}, {0x6, 0xa}, {0x6, 0x5}, {0x2, 0x1}, {0x3, 0x8}, {0x0, 0x8}, {0x0, 0xa}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x1, 0x4}, {0x2, 0x4}, {0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x0, 0x6, 0x1, 0x60, 0x1b, 0x48, 0x4, 0x18, 0x36, 0x3f, 0xb, 0x16, 0xb818c88c366d8d39, 0x18, 0x3d40aa5bb13d2d3e, 0x18, 0x6c]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x24, 0x1b, 0x2, 0x36, 0x1b, 0x48, 0x16, 0x36, 0x6, 0x22, 0xb4e8551bbc6c443f]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xe, 0x36, 0x1, 0xadb, 0x8c7, 0xe6ed, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x1000, 0x1, 0x101, 0xa, 0x32a9, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0xb, 0x18, 0xb, 0x30, 0x60, 0x5, 0x6c, 0x1, 0x4, 0x18, 0x3, 0x1b, 0x0, 0x12, 0x1b, 0xc, 0x24, 0x48, 0x5, 0x30, 0x73]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x0, 0x81, 0xb, 0x1, 0x8000, 0xff]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}]}]}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x7}, {0x2, 0x9}, {0x7}, {0x3, 0x8}, {0x3, 0x6}, {0x3, 0x1}, {0x7, 0x5}, {0x6, 0x2}, {0x2, 0x6}, {0x6, 0x7}, {0x7}, {0x7, 0x2}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x2}, {0x0, 0x8}, {0x5}, {0x2, 0x6}, {0x0, 0x5}, {}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xff, 0x0, 0x6, 0xe8, 0xfff5, 0x4, 0x81]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x2}, {0x1, 0x5}, {0x1}, {0x2, 0x3}, {0x5, 0xa}, {0x1, 0xa}, {0x5, 0x9}, {0x7, 0x4}, {0x3, 0xa}, {0x3, 0x3}, {0x1, 0x4}, {0x2, 0x6}, {0x4, 0x3}, {0x2, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x0, 0x7}, {0x3, 0x1}, {0x1, 0x6}, {0x3, 0xa}, {0x3}, {0x6, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0xc, 0x2c, 0xe7c, 0x0, 0xf, 0x1, 0x3]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x4, 0x1, 0x2, 0x6c, 0x60, 0x30, 0x12, 0x60, 0x9, 0x1, 0xc, 0x48, 0x3, 0x18, 0x30, 0x18, 0xc, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0x5}, {0x1, 0x1}, {0x6, 0x2}, {0x7, 0x1}, {0x7, 0x9}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x2, 0x4}, {0x7, 0x1}, {0x5}, {0x4}, {0x3, 0x6}, {0x1, 0x4}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x2}, {0x5, 0x4}, {0x6, 0xa}, {0x7, 0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x6}, {0x7, 0x4}, {0x0, 0x6}]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x24, 0x60, 0x3, 0xb, 0x36, 0x1, 0x24, 0x6, 0x0, 0x24, 0x48, 0x2, 0x6]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x2}, {0x1, 0x6}, {0x6, 0x3}, {0x2, 0x3}, {0x5, 0x1}, {0x5, 0x9}, {0x5, 0x2}, {0x5, 0x4}, {0x2, 0x1}, {0x7, 0x4}, {0x7, 0x1}, {0x4, 0x3}, {0x1, 0xa}, {0x4, 0x2}, {0x5}, {0x6, 0x4}, {0x1, 0x9}, {0x0, 0x9}, {0x2, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x4}, {0x2, 0x4}, {0x1}, {0x4, 0x4}, {0x5, 0x6}, {0x5, 0x7}, {0x0, 0x8}, {0x6, 0xa}, {0x3, 0x3}, {0x6, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x3, 0x4}, {0x2, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x2, 0x8}, {0x1, 0x8}, {0x2, 0xa}, {0x7, 0x8}, {0x0, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x5, 0x2}, {0x4}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9d6, 0x0, 0x7, 0x2, 0x9f5, 0x1, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0xa}, {0x1}, {0x7, 0x3}, {0x1, 0x8}, {0x7, 0x4}, {0x6, 0x6}, {0x6, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x5, 0x1}, {0x0, 0x2}, {0x1, 0x3}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0xa}, {0x4, 0x2}, {0x7, 0x3}, {0x3, 0x7}, {0x5}, {0x3, 0x4}, {0x5, 0xa}, {0x6, 0x6}, {0x2, 0x6}, {0x4, 0xa}, {0x5, 0x8}, {0x2, 0x9}, {}]}]}]}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5696, 0x49c1, 0x5, 0x6, 0x3181, 0x3, 0x9, 0xfffd]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x48, 0x16, 0x2, 0x1, 0x30, 0x30, 0x24, 0x6, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x5, 0x6, 0x5, 0xe, 0x7, 0xffff]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0x8}, {0x6, 0x8}, {0x5, 0x2}, {0x3}, {0x5, 0x9}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x9}, {0x2, 0x7}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x3}, {0x1, 0x5}, {0x5, 0x5}, {0x3, 0x5}, {0x0, 0x6}, {0x0, 0x1}, {0x3}, {0x5, 0x7}, {0x0, 0x4}, {0x0, 0x4}, {0x7, 0x2}, {0x0, 0x4}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x5}, {0x1, 0x5}, {0x6, 0x1}, {0x5, 0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x7}, {0x5}, {0x5, 0x7}, {0x0, 0x5}, {0x4, 0x3}, {0x3, 0x7}, {0x5, 0xa}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x7}, {0x4, 0x6}, {0x6, 0x2}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x5, 0x3}, {0x0, 0x5}, {0x0, 0x1}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x0, 0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x4, 0x6}, {0x3, 0xa}, {0x3}, {0x1, 0x9}, {0x5, 0x7}, {0x5, 0x4}, {0x6, 0x2}, {0x6, 0x4}, {0x2, 0x7}, {0x7, 0x2}, {0x1}, {}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x2}, {0x2, 0x3}, {0x6, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x6, 0x1}, {0x5, 0x5}, {0x3, 0x6}, {0x1, 0x9}, {0x4, 0x7}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x7}, {0x3, 0x3}, {0x5}, {0x6, 0x8}, {0x0, 0x1}, {0x6}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x9}, {0x6, 0x6}, {0x6}, {0x0, 0x5}, {0x1}, {0x2, 0x8}, {0x5, 0x4}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x2}, {0x5, 0x9}, {0x0, 0x5}, {}, {0x2, 0x9}, {0x2, 0x6}, {0x0, 0x8}, {0x0, 0x5}, {0x2, 0x9}, {0x3, 0x7}, {0x5, 0x5}, {0x2, 0x9}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x7, 0x0, 0x30, 0x0, 0x4, 0x1, 0x1, 0x50, 0x5]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x7}, {0x4, 0x4}, {}, {0x5, 0x7}, {0x5, 0x2}, {0x7}, {0x1, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x5, 0x7}, {0x6, 0x6}, {0x3, 0x1}, {0x5, 0x3}, {0x2, 0x1}, {0x3, 0x2}, {0x2, 0x7}, {0x7, 0x2}, {0x0, 0x7}, {0x1, 0x3}, {0x4, 0x2}, {0x2, 0x2}, {0x7, 0x4}, {0x7}, {0x3, 0x6}, {0x0, 0x6}, {0x5, 0x3}, {0x2, 0x3}, {0x6, 0x4}, {0x0, 0x6}, {0x7, 0x3}, {0x3, 0x8}, {0x5, 0x6}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0x6}, {0x2}, {0x7, 0x3}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x8}, {0x4, 0x6}, {0x2, 0x7}, {0x4, 0x4}]}]}]}]}, 0x5d8}}, 0x40080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x2, 0x0) r11 = socket(0x2, 0x80805, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r12 = socket(0x1e, 0x1, 0x0) write$binfmt_misc(r12, &(0x7f0000000340), 0x2000011a) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 10m33.705712615s ago: executing program 1 (id=1420): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0xc9, 0x4) stat(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000340)='./file0/../file0/file0\x00', 0x1000040, &(0x7f00000004c0)={[], [{@subj_user}, {@fowner_gt={'fowner>', r1}}, {@subj_user={'subj_user', 0x3d, ':'}}, {@seclabel}, {@fowner_lt={'fowner<', r1}}, {@pcr={'pcr', 0x3d, 0x5}}]}, 0x1, 0x5bb, &(0x7f0000002b80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x800000000000000) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={0xffffffffffffffff, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xf, 0x5, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x8}]}, &(0x7f0000000440)='syzkaller\x00', 0x800, 0xd7, &(0x7f0000000540)=""/215, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x80000001, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, r3, r4, r3, r2, r5, r2], 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) sendmsg$kcm(r6, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001180)={0x0, 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r9, &(0x7f0000001140)=[{{&(0x7f0000000880)=@llc, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000b80)=""/226, 0xe2}, {&(0x7f0000000c80)=""/192, 0xc0}, {&(0x7f0000000d40)=""/225, 0xe1}, {&(0x7f0000000e40)=""/169, 0xa9}, {&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000000f00)=""/167, 0xa7}, {&(0x7f0000001200)=""/254, 0xfe}, {&(0x7f0000000980)=""/34, 0x22}], 0x8}, 0x9}], 0x1, 0x40000022, &(0x7f00000011c0)={r7, r8+10000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0xc, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffffffffffffa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r10}, 0x10) r11 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r11, r11, 0x21) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4054, 0xfd6}], 0x1) 10m33.541736416s ago: executing program 3 (id=1423): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xf, &(0x7f00000005c0)=ANY=[@ANYRES64=r1, @ANYRESHEX=r3, @ANYRES8=r0], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r5, 0x0, 0x0, 0x34825de09664bd79}, 0x20) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000007295"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6(0xa, 0x802, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000440)=0x2458, 0x1f) sendto$inet6(r9, 0x0, 0x0, 0x400c844, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @mcast2}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x40000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x7ff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 10m33.372687508s ago: executing program 3 (id=1424): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xb, &(0x7f0000001200)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f00000002c0)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffb}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000001000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="03000000040000000400000001000000", @ANYRES32=0x0, @ANYRES64, @ANYBLOB], 0x48) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900010073797a30000000000c0002400000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x200000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x6, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) 10m33.295851108s ago: executing program 0 (id=1425): syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="390000001800010000000000fedbdf2502000000fc01c80900272000060015000200000014001680100408800c00018004"], 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x4000000) syz_emit_ethernet(0x1, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) read$char_usb(r4, &(0x7f0000000000)=""/140, 0x8c) 10m33.223199667s ago: executing program 3 (id=1426): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x310) 10m33.222789827s ago: executing program 0 (id=1427): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x103}, 0x100002, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x1ffffffffffffe47, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) 10m33.222368407s ago: executing program 3 (id=1428): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0xc0a81, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8080) bind$rds(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x80, 0x4) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x6, 0x8012, r1, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setreuid(0x0, 0xee00) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x564, 0x6280c0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, 0x0) 10m33.213653808s ago: executing program 4 (id=1429): syz_emit_ethernet(0xfe, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x8000000000000000, &(0x7f0000000300), 0x111}}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000480)='free_extent_state\x00', r1}, 0x18) r3 = syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001}, &(0x7f0000000100), &(0x7f0000000040)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x8084) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000280), 0x6a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070133d48f5cffffb70200000800fdffb60300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7cf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r7, 0x0, 0x1034}, 0x18) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x401}], 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f00000001c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000200)="6a4049f89aa3ce4d3c806b9de9f944dc35085a45f098e15d6c12a0c4b0486efbb972bc234a9ded434287dba03f00ec7570c80d25", 0x34}, 0x44048850) 10m33.204931509s ago: executing program 0 (id=1430): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x10208, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000001200)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r5, 0x800, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48051}, 0x24008050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x6, 0x8002, 0xffffffffffffffff, &(0x7f0000000440)}]) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r10, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x6, r11}, 0xc) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x3c}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 10m32.593008608s ago: executing program 3 (id=1431): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="18000000ed07449e000000000000000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x1]}}], 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r1, 0xffffffffffffffff, 0x400000000000000) syz_emit_ethernet(0x0, 0x0, 0x0) 10m32.536884676s ago: executing program 3 (id=1432): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00'}, 0x18) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000080)={{0x0, 0x0}, {0x0}}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) io_setup(0x8f0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$eJzs3M9rG0cUwPEnWZYlGVs6lJYWiof20l4WW+25VBQbSgU1tlVqFwxre9UKbSWjFS4qpbZPvZbccwrkYHz0zZD4H/Alt+SSS266BHKICSEb9pf107asyJFjfz8QdjQzTzujGYW3i1f1X///s5i3tLxelXBMSUhE5EQkJWEJhPxj2C1HpdmOfD3+4vHni8srP2Wy2dkFpeYyS9+klVKTUw/++ifudzsck+PUav15+tnxx8ef1t8s/VGwVMFSpXJV6Wqt/LSqr5mG2ihYRU2pedPQLUMVSpZR8drLXnveLG9u1pRe2phIbFYMy1J6qaaKRk1Vy6paqSn9d71QUpqmqYmE4ALOgi7omT6j1wc8GlyRSiWjj4hIvKMltzeUAQEAgKFqz//DTkrfV/4vk27+73Ru5P/7XxxVx385mDx0Ylfrh9Fu+f+3T7z3asn/YyLST/5/Vy6R/3dmRLdLbm+h//wf18NUtKMq1PLKyf8T/vfXtfvb/rRbIP8HAAAAAAAAAAAAAAAAAAAAAOBDcGLbSdu2k8Ex+Nd4hMB/jRvprPUfE5GYs/o263+TLS6vSMx9cM9ZY/O/rdxWzjv6HY5ExBRDpiUpr9394HPKwZNHypGSh+a2G//KOY64LZm8FNz4GUlKqj3etud+zM7OKI8ff/qYUqI5Pi1J+ah7fLo13hn/9lYuKl992RSvSVIerUtZTNlw93Uj/t8ZpX74OdsWH/dOAgAAAADADaApFfIvn1Ot17/e9bumKdW93fuVkUzevU10xv0B7/p6uuv1eST5WWTYswcAAAAA4Hawan8XddM0KucU4nJxn/4Lkd46R9tqRs/rPNI0w17HE3VvZIi867zu9fipthSCP6RoaYr5lf2NJ5j/wNZrp7kmLD1ERdoHP+VUqEuefdefyGlNcNsoesbnLPOd7xM+ZyeMDmw/f3Ln/svBfUG+Owh2wMWdd/s9V6x917mF0av+fwcAAADA+9dI+oOa75ubQ0MZFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt8yV/KRfW2HYcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACui7cBAAD//5Oa+gc=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) sendfile(r6, r6, 0x0, 0x7a680000) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a300000000059000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d1c001280"], 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01032cbd7000000000"], 0x30}}, 0x480c4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRESOCT=r1, @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa91407d553aa38f4, 0x3, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000200)='kmem_cache_free\x00', r10, 0x0, 0xffffffffffffffff}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6026843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e2258be8f5b820c88783549a1db928b4133545992ddd749908e0945f6cff024b9b112d2606a16d1088cc9c7a2a072f981ecfb2d3709750df78eee", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002f3d890780000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) 8m52.192153972s ago: executing program 32 (id=1430): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x10208, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000001200)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r5, 0x800, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48051}, 0x24008050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x6, 0x8002, 0xffffffffffffffff, &(0x7f0000000440)}]) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r10, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x6, r11}, 0xc) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x3c}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 8m52.168662945s ago: executing program 33 (id=1420): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0xc9, 0x4) stat(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000340)='./file0/../file0/file0\x00', 0x1000040, &(0x7f00000004c0)={[], [{@subj_user}, {@fowner_gt={'fowner>', r1}}, {@subj_user={'subj_user', 0x3d, ':'}}, {@seclabel}, {@fowner_lt={'fowner<', r1}}, {@pcr={'pcr', 0x3d, 0x5}}]}, 0x1, 0x5bb, &(0x7f0000002b80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x800000000000000) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={0xffffffffffffffff, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xf, 0x5, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x8}]}, &(0x7f0000000440)='syzkaller\x00', 0x800, 0xd7, &(0x7f0000000540)=""/215, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x80000001, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, r3, r4, r3, r2, r5, r2], 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) sendmsg$kcm(r6, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001180)={0x0, 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r9, &(0x7f0000001140)=[{{&(0x7f0000000880)=@llc, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000b80)=""/226, 0xe2}, {&(0x7f0000000c80)=""/192, 0xc0}, {&(0x7f0000000d40)=""/225, 0xe1}, {&(0x7f0000000e40)=""/169, 0xa9}, {&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000000f00)=""/167, 0xa7}, {&(0x7f0000001200)=""/254, 0xfe}, {&(0x7f0000000980)=""/34, 0x22}], 0x8}, 0x9}], 0x1, 0x40000022, &(0x7f00000011c0)={r7, r8+10000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0xc, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffffffffffffa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r10}, 0x10) r11 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r11, r11, 0x21) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4054, 0xfd6}], 0x1) 8m52.072158578s ago: executing program 34 (id=1417): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xf, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000007295", @ANYRES16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae8}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r8, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)={0x5d8, r8, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x55}}}}, [@NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x3, 0x3, 0x7e6, 0x8, 0x5, 0x8d2e]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0xb, 0x1, 0x5, 0x18, 0x18, 0x2, 0x16, 0x36, 0x6, 0x18, 0x6, 0x48, 0x1, 0x18, 0x9, 0x5, 0x24, 0x16, 0x1, 0x12, 0x36, 0xb, 0x1b, 0x6, 0x1, 0x24, 0x9, 0x24, 0x3, 0x30, 0x2]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x4}, {0x2, 0x3}, {0x6, 0x6}, {0x0, 0x3}, {0x5, 0x3}, {0x2, 0x9}, {0x0, 0x6}, {0x4, 0xa}, {0x2, 0x8}, {0x0, 0xa}, {0x1, 0xa}, {0x6, 0x1}, {0x7, 0xa}, {0x1, 0xa}, {0x2, 0x3}, {0x4, 0x3}, {0x4}, {0x0, 0x8}, {0x0, 0x6}, {0x2, 0x3}, {0x6}, {0x6, 0x8}, {0x3, 0x6}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x6}, {0x4, 0x9}, {0x2, 0x7}, {0x4, 0x6}, {0x2, 0x1}, {0x3, 0x7}, {0x1, 0x4}, {0x4}, {0x3, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x8}, {0x1, 0x4}, {0x7, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x2, 0x9}, {0x4, 0x8}, {0x2, 0x1}, {0x5, 0x2}, {0x6, 0x1}, {0x0, 0x8}, {0x4, 0x9}, {0x0, 0x6}, {0x7, 0x8}, {0x4, 0x1}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x2}, {0x1, 0x7}, {0x6, 0x5}, {0x1, 0x1}, {0x7, 0x5}, {0x7}, {0x5, 0x8}, {0x1, 0x7}, {0x7, 0x6}, {0x6, 0x2}, {0x5, 0x9}, {0x2, 0x9}, {0x1, 0x4}, {0x3, 0x5}, {0x6, 0x1}, {0x3, 0x5}, {0x6, 0x7}, {0x7, 0x4}, {0x2, 0x5}, {0x2, 0x3}, {0x6, 0x1}, {0x0, 0x4}, {0x1, 0xa}, {0x7, 0x8}, {0x7, 0x3}, {0x3, 0x7}, {0x7, 0x7}, {0x4, 0x4}, {0x2}, {0x4, 0x9}, {0x0, 0x2}, {0x5}, {0x1, 0x9}, {0x6, 0x8}, {0x7, 0x8}, {0x5, 0xa}, {0x6, 0x4}, {0x5, 0x2}, {0x2}, {0x3}, {0x0, 0x7}, {0x1, 0xa}, {0x7, 0x8}, {0x4, 0x1}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x36, 0x24, 0x24, 0x6, 0x1, 0x6, 0x1b, 0x6, 0x18, 0x2, 0x20, 0x6, 0x5, 0x6c, 0x3e, 0x1, 0x30]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x3, 0x8}, {0x0, 0x3}]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x12, 0x12, 0x5, 0x1b, 0xc, 0x1b, 0x5, 0x36, 0x6, 0xb, 0x5, 0x2, 0x3, 0x36, 0x1, 0x1, 0x16, 0x11, 0x24, 0x18, 0x24, 0x9, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xc, 0x12, 0x30, 0x16, 0x1b]}]}]}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3ff, 0x3e8, 0xfff, 0x1, 0x1, 0x200, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x4}, {0x1, 0x8}, {0x3, 0x2}, {0x6}, {0x2, 0x2}, {0x0, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0x5}, {0x4}, {0x3, 0x3}, {0x3, 0x5}, {0x5, 0x7}, {0x3}, {0x5, 0x9}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x1}, {0x7, 0x9}, {0x4, 0x8}, {0x7, 0x8}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x1}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x7, 0xa}, {0x3, 0x1}, {0x0, 0x2}, {0x0, 0x9}, {0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0xfff, 0x400, 0x5, 0x6, 0x8000, 0x2]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3, 0x4}, {0x0, 0x5}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x7, 0xa}, {0x4, 0x9}, {0x4, 0x3}, {0x2, 0x6}, {0x7, 0xa}, {0x4}, {0x0, 0x3}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x2, 0x8000, 0x15, 0x8000, 0x8000, 0x200]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff01, 0x9, 0x1, 0xd986, 0x8, 0x1, 0x5, 0xfffe]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x5}, {0x1, 0x2}, {0x4, 0x5}, {0x4, 0x8}, {0x1, 0x6}, {0x6, 0xa}, {0x6, 0x5}, {0x2, 0x1}, {0x3, 0x8}, {0x0, 0x8}, {0x0, 0xa}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x1, 0x4}, {0x2, 0x4}, {0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x0, 0x6, 0x1, 0x60, 0x1b, 0x48, 0x4, 0x18, 0x36, 0x3f, 0xb, 0x16, 0xb818c88c366d8d39, 0x18, 0x3d40aa5bb13d2d3e, 0x18, 0x6c]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x24, 0x1b, 0x2, 0x36, 0x1b, 0x48, 0x16, 0x36, 0x6, 0x22, 0xb4e8551bbc6c443f]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xe, 0x36, 0x1, 0xadb, 0x8c7, 0xe6ed, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x1000, 0x1, 0x101, 0xa, 0x32a9, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0xb, 0x18, 0xb, 0x30, 0x60, 0x5, 0x6c, 0x1, 0x4, 0x18, 0x3, 0x1b, 0x0, 0x12, 0x1b, 0xc, 0x24, 0x48, 0x5, 0x30, 0x73]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x0, 0x81, 0xb, 0x1, 0x8000, 0xff]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}]}]}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x7}, {0x2, 0x9}, {0x7}, {0x3, 0x8}, {0x3, 0x6}, {0x3, 0x1}, {0x7, 0x5}, {0x6, 0x2}, {0x2, 0x6}, {0x6, 0x7}, {0x7}, {0x7, 0x2}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x2}, {0x0, 0x8}, {0x5}, {0x2, 0x6}, {0x0, 0x5}, {}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xff, 0x0, 0x6, 0xe8, 0xfff5, 0x4, 0x81]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x2}, {0x1, 0x5}, {0x1}, {0x2, 0x3}, {0x5, 0xa}, {0x1, 0xa}, {0x5, 0x9}, {0x7, 0x4}, {0x3, 0xa}, {0x3, 0x3}, {0x1, 0x4}, {0x2, 0x6}, {0x4, 0x3}, {0x2, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x0, 0x7}, {0x3, 0x1}, {0x1, 0x6}, {0x3, 0xa}, {0x3}, {0x6, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0xc, 0x2c, 0xe7c, 0x0, 0xf, 0x1, 0x3]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x4, 0x1, 0x2, 0x6c, 0x60, 0x30, 0x12, 0x60, 0x9, 0x1, 0xc, 0x48, 0x3, 0x18, 0x30, 0x18, 0xc, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0x5}, {0x1, 0x1}, {0x6, 0x2}, {0x7, 0x1}, {0x7, 0x9}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x2, 0x4}, {0x7, 0x1}, {0x5}, {0x4}, {0x3, 0x6}, {0x1, 0x4}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x2}, {0x5, 0x4}, {0x6, 0xa}, {0x7, 0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x6}, {0x7, 0x4}, {0x0, 0x6}]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x24, 0x60, 0x3, 0xb, 0x36, 0x1, 0x24, 0x6, 0x0, 0x24, 0x48, 0x2, 0x6]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x2}, {0x1, 0x6}, {0x6, 0x3}, {0x2, 0x3}, {0x5, 0x1}, {0x5, 0x9}, {0x5, 0x2}, {0x5, 0x4}, {0x2, 0x1}, {0x7, 0x4}, {0x7, 0x1}, {0x4, 0x3}, {0x1, 0xa}, {0x4, 0x2}, {0x5}, {0x6, 0x4}, {0x1, 0x9}, {0x0, 0x9}, {0x2, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x4}, {0x2, 0x4}, {0x1}, {0x4, 0x4}, {0x5, 0x6}, {0x5, 0x7}, {0x0, 0x8}, {0x6, 0xa}, {0x3, 0x3}, {0x6, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x3, 0x4}, {0x2, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x2, 0x8}, {0x1, 0x8}, {0x2, 0xa}, {0x7, 0x8}, {0x0, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x5, 0x2}, {0x4}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9d6, 0x0, 0x7, 0x2, 0x9f5, 0x1, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0xa}, {0x1}, {0x7, 0x3}, {0x1, 0x8}, {0x7, 0x4}, {0x6, 0x6}, {0x6, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x5, 0x1}, {0x0, 0x2}, {0x1, 0x3}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0xa}, {0x4, 0x2}, {0x7, 0x3}, {0x3, 0x7}, {0x5}, {0x3, 0x4}, {0x5, 0xa}, {0x6, 0x6}, {0x2, 0x6}, {0x4, 0xa}, {0x5, 0x8}, {0x2, 0x9}, {}]}]}]}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5696, 0x49c1, 0x5, 0x6, 0x3181, 0x3, 0x9, 0xfffd]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x48, 0x16, 0x2, 0x1, 0x30, 0x30, 0x24, 0x6, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x5, 0x6, 0x5, 0xe, 0x7, 0xffff]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0x8}, {0x6, 0x8}, {0x5, 0x2}, {0x3}, {0x5, 0x9}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x9}, {0x2, 0x7}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x3}, {0x1, 0x5}, {0x5, 0x5}, {0x3, 0x5}, {0x0, 0x6}, {0x0, 0x1}, {0x3}, {0x5, 0x7}, {0x0, 0x4}, {0x0, 0x4}, {0x7, 0x2}, {0x0, 0x4}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x5}, {0x1, 0x5}, {0x6, 0x1}, {0x5, 0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x7}, {0x5}, {0x5, 0x7}, {0x0, 0x5}, {0x4, 0x3}, {0x3, 0x7}, {0x5, 0xa}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x7}, {0x4, 0x6}, {0x6, 0x2}, {0x5, 0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x5, 0x3}, {0x0, 0x5}, {0x0, 0x1}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x0, 0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x4, 0x6}, {0x3, 0xa}, {0x3}, {0x1, 0x9}, {0x5, 0x7}, {0x5, 0x4}, {0x6, 0x2}, {0x6, 0x4}, {0x2, 0x7}, {0x7, 0x2}, {0x1}, {}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x2}, {0x2, 0x3}, {0x6, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x6, 0x1}, {0x5, 0x5}, {0x3, 0x6}, {0x1, 0x9}, {0x4, 0x7}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x7}, {0x3, 0x3}, {0x5}, {0x6, 0x8}, {0x0, 0x1}, {0x6}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x9}, {0x6, 0x6}, {0x6}, {0x0, 0x5}, {0x1}, {0x2, 0x8}, {0x5, 0x4}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x2}, {0x5, 0x9}, {0x0, 0x5}, {}, {0x2, 0x9}, {0x2, 0x6}, {0x0, 0x8}, {0x0, 0x5}, {0x2, 0x9}, {0x3, 0x7}, {0x5, 0x5}, {0x2, 0x9}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x7, 0x0, 0x30, 0x0, 0x4, 0x1, 0x1, 0x50, 0x5]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x7}, {0x4, 0x4}, {}, {0x5, 0x7}, {0x5, 0x2}, {0x7}, {0x1, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x5, 0x7}, {0x6, 0x6}, {0x3, 0x1}, {0x5, 0x3}, {0x2, 0x1}, {0x3, 0x2}, {0x2, 0x7}, {0x7, 0x2}, {0x0, 0x7}, {0x1, 0x3}, {0x4, 0x2}, {0x2, 0x2}, {0x7, 0x4}, {0x7}, {0x3, 0x6}, {0x0, 0x6}, {0x5, 0x3}, {0x2, 0x3}, {0x6, 0x4}, {0x0, 0x6}, {0x7, 0x3}, {0x3, 0x8}, {0x5, 0x6}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0x6}, {0x2}, {0x7, 0x3}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x8}, {0x4, 0x6}, {0x2, 0x7}, {0x4, 0x4}]}]}]}]}, 0x5d8}}, 0x40080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x2, 0x0) r11 = socket(0x2, 0x80805, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r12 = socket(0x1e, 0x1, 0x0) write$binfmt_misc(r12, &(0x7f0000000340), 0x2000011a) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8m52.035938052s ago: executing program 35 (id=1432): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00'}, 0x18) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000080)={{0x0, 0x0}, {0x0}}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) io_setup(0x8f0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) sendfile(r6, r6, 0x0, 0x7a680000) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a300000000059000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d1c001280"], 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01032cbd7000000000"], 0x30}}, 0x480c4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRESOCT=r1, @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa91407d553aa38f4, 0x3, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000200)='kmem_cache_free\x00', r10, 0x0, 0xffffffffffffffff}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6026843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e2258be8f5b820c88783549a1db928b4133545992ddd749908e0945f6cff024b9b112d2606a16d1088cc9c7a2a072f981ecfb2d3709750df78eee", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002f3d890780000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) 8m51.955222893s ago: executing program 36 (id=1429): syz_emit_ethernet(0xfe, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x8000000000000000, &(0x7f0000000300), 0x111}}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000480)='free_extent_state\x00', r1}, 0x18) r3 = syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001}, &(0x7f0000000100), &(0x7f0000000040)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x8084) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000280), 0x6a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070133d48f5cffffb70200000800fdffb60300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7cf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r7, 0x0, 0x1034}, 0x18) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x401}], 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f00000001c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10, 0x0, 0x0, &(0x7f0000000200)="6a4049f89aa3ce4d3c806b9de9f944dc35085a45f098e15d6c12a0c4b0486efbb972bc234a9ded434287dba03f00ec7570c80d25", 0x34}, 0x44048850) 3.681469715s ago: executing program 5 (id=8341): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5ef, 0x7}, 0x0, 0x0, 0x10000001, 0x8, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) listen(0xffffffffffffffff, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0x7fff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3, 0x0, 0x3}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xfffffffffffffff7) lsetxattr$security_selinux(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0) memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setreuid(0xee01, 0x0) r4 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) socket$kcm(0x21, 0x5, 0xa) shmdt(r4) 3.206877466s ago: executing program 8 (id=8346): bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002"], 0x190}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "223cfe8fe13ede62", "cfee63183d64a2a8dc06f4a0169309bb", "ae5288cc", "6a9ec75283ca13a5"}, 0x28) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x1d0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0xe}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x6, 0x96df, 0x2, 0x3, 0x80000000, 0x400, 0x4}}, {0xc, 0x2, [0x100, 0x3, 0x5, 0x8]}}]}, @TCA_STAB={0x15c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3, 0x6, 0xf7bb, 0x2, 0x9, 0x5, 0x2}}, {0x8, 0x2, [0x6, 0x4]}}, {{0x1c, 0x1, {0x0, 0xfe, 0x2708, 0x9, 0x2, 0x8000, 0x5, 0x1}}, {0x6, 0x2, [0x3de]}}, {{0x1c, 0x1, {0xf7, 0x7d, 0x2, 0xb3, 0x2, 0x8, 0x2, 0x8}}, {0x14, 0x2, [0x9, 0x797, 0xc34, 0x0, 0xbd08, 0xcad, 0x9, 0xf]}}, {{0x1c, 0x1, {0xa4, 0x7, 0x400, 0xfff, 0x1, 0x7, 0x1d2, 0x3}}, {0xa, 0x2, [0x4, 0xfffa, 0x7]}}, {{0x1c, 0x1, {0x10, 0x75, 0x6, 0x7, 0x0, 0x6, 0x5, 0x7}}, {0x12, 0x2, [0x7, 0x0, 0x2, 0x1, 0x4, 0xd, 0x3]}}, {{0x1c, 0x1, {0x5, 0xe, 0x200, 0xffffff7f, 0x0, 0xffff, 0xfffffff8, 0x6}}, {0x10, 0x2, [0x401, 0xd, 0x67ee, 0x7f, 0x2, 0x1]}}, {{0x1c, 0x1, {0x5, 0x0, 0x4, 0x6, 0x1, 0x34c3, 0xff, 0x8}}, {0x14, 0x2, [0x5b, 0x7, 0x1847, 0xffff, 0xfc, 0x7, 0x6, 0x6]}}, {{0x1c, 0x1, {0x2, 0xc2, 0x8000, 0x1, 0x2, 0x3ff, 0x11b1, 0x5}}, {0xe, 0x2, [0x4, 0x1ff, 0x1ff, 0x3, 0x1]}}]}]}, 0x1d0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.074825243s ago: executing program 5 (id=8347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 2.948975349s ago: executing program 9 (id=8349): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x10000, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000300)={r0, 0x1000000, 0xd, 0xfff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xe0aea1b5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) 2.937337551s ago: executing program 6 (id=8350): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 2.835244244s ago: executing program 5 (id=8351): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5ef, 0x7}, 0x0, 0x0, 0x10000001, 0x8, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) listen(0xffffffffffffffff, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0x7fff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3, 0x0, 0x3}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xfffffffffffffff7) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setreuid(0xee01, 0x0) r4 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0) socket$kcm(0x21, 0x5, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) shmdt(r4) 2.650668808s ago: executing program 6 (id=8353): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5ef, 0x7}, 0x0, 0x0, 0x10000001, 0x8, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) listen(0xffffffffffffffff, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0x7fff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3, 0x0, 0x3}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xfffffffffffffff7) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setreuid(0xee01, 0x0) r4 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) socket$kcm(0x21, 0x5, 0xa) shmdt(r4) 2.623011942s ago: executing program 9 (id=8354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2b, 0x1, 0x1) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) unshare(0x20000100) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 2.427668837s ago: executing program 5 (id=8355): bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002"], 0x190}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "223cfe8fe13ede62", "cfee63183d64a2a8dc06f4a0169309bb", "ae5288cc", "6a9ec75283ca13a5"}, 0x28) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x1d0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0xe}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x6, 0x96df, 0x2, 0x3, 0x80000000, 0x400, 0x4}}, {0xc, 0x2, [0x100, 0x3, 0x5, 0x8]}}]}, @TCA_STAB={0x15c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3, 0x6, 0xf7bb, 0x2, 0x9, 0x5, 0x2}}, {0x8, 0x2, [0x6, 0x4]}}, {{0x1c, 0x1, {0x0, 0xfe, 0x2708, 0x9, 0x2, 0x8000, 0x5, 0x1}}, {0x6, 0x2, [0x3de]}}, {{0x1c, 0x1, {0xf7, 0x7d, 0x2, 0xb3, 0x2, 0x8, 0x2, 0x8}}, {0x14, 0x2, [0x9, 0x797, 0xc34, 0x0, 0xbd08, 0xcad, 0x9, 0xf]}}, {{0x1c, 0x1, {0xa4, 0x7, 0x400, 0xfff, 0x1, 0x7, 0x1d2, 0x3}}, {0xa, 0x2, [0x4, 0xfffa, 0x7]}}, {{0x1c, 0x1, {0x10, 0x75, 0x6, 0x7, 0x0, 0x6, 0x5, 0x7}}, {0x12, 0x2, [0x7, 0x0, 0x2, 0x1, 0x4, 0xd, 0x3]}}, {{0x1c, 0x1, {0x5, 0xe, 0x200, 0xffffff7f, 0x0, 0xffff, 0xfffffff8, 0x6}}, {0x10, 0x2, [0x401, 0xd, 0x67ee, 0x7f, 0x2, 0x1]}}, {{0x1c, 0x1, {0x5, 0x0, 0x4, 0x6, 0x1, 0x34c3, 0xff, 0x9}}, {0x16, 0x2, [0x5b, 0x7, 0x1847, 0xffff, 0xfc, 0x7, 0x6, 0x6, 0x4]}}, {{0x1c, 0x1, {0x2, 0xc2, 0x8000, 0x1, 0x2, 0x3ff, 0x11b1, 0x4}}, {0xc, 0x2, [0x4, 0x1ff, 0x3, 0x1]}}]}]}, 0x1d0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.233516482s ago: executing program 8 (id=8357): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 2.198372636s ago: executing program 9 (id=8358): unshare(0x20000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000100)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x7, 0x100000000000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setresuid(0x0, 0xee00, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @empty, 'team_slave_1\x00'}}, 0x1e) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0) 2.134749484s ago: executing program 6 (id=8359): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7ff}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000001200010227bd7000fedbdf2507000000", @ANYRES32, @ANYBLOB="189c000001100400140014007665746830000000000000000000000008001f00f9ffffff0a0001"], 0x6c}, 0x1, 0x0, 0x0, 0x3000c054}, 0x20000000) read(r0, &(0x7f00000001c0)=""/253, 0xfd) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={0xffffffffffffffff, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000c00)=[0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f0000000c80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r6 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000000000001400000008000300", @ANYRES32=r5, @ANYBLOB="08001c00", @ANYRES32=r6], 0x24}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000228bd7000fedbdf25050000000c000600030000000300000008000300", @ANYRES32=r5, @ANYBLOB="0c00060003000000030000000c00060003000000030000000c0006ae13312b77d25af300080003005da03c5123cad1024b7548c8818eead044efa5412920674dc2fed1fd410cf211af31972f1caea16fb41a224082bfc9cad9d58ba59b439538af8ec50fe84f07ed", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="0c00060002000000000000000c0006000000000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092dd17d39ed975", 'LP3F', "50f641306280c4e9"}, 0x28) setsockopt$inet6_tcp_int(r8, 0x11a, 0x4, &(0x7f0000000040), 0x44) mount$bind(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) 1.804010277s ago: executing program 7 (id=8360): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.78684936s ago: executing program 8 (id=8361): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setuid(0x0) 1.623968751s ago: executing program 7 (id=8362): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 1.517734244s ago: executing program 8 (id=8363): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x103}, 0x100002, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x1ffffffffffffe47, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setuid(0x0) 1.39976424s ago: executing program 7 (id=8364): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c25000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9, 0x0, {}, 0x4}) 1.310989941s ago: executing program 6 (id=8365): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x4, 0x10000, 0x1, 0x12}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$eJzs3b9rVFkUAOAzmcmvbSYsCwvLLjuwLGw1JIHtsyy7bNigYhgkIsGJmUjIhICBgBZJrAQrG0vLdBFBCzv9HwQbG7ERS9NZSJ4kL0xmzEQTMfMk833NPbx7znv33vDeyxRz5/LPiwuzS8tzW1uvY2AgF4Wxq9tJkouh6Il8pNYDADhN3iVJvE1SWY8FAOgM738A6D6Hvf//60nb3rQ5l8XYAICT8eWf/+9OPXlZrY39eYTUpL8Rvpg+/hgBgK9rcuri/9tPfx8cj0d3IhZvrVRWKmmb9v81F/NRj1oMRzHeRyQNafzv+MQ/w6UdgxGVxbW9+rWVSr61fiSKMRRx4czB+pFSqrW+N75rrh+NYvzQ/vqjbev74o/fmurLUYxnV2Ip6jG78y9JU/3qSKn099mJj+r7d/NiI5/p3wcAAAAAAAAAAAAAAAAAAAAAgNOpXGoYard/T7l8WH9af/T9gfb357m9W1+InwpxM9vZAwAAAAAAAAAAAAAAAAAAwLdh+fqNhWq9XrvWCGbOz3/feuRzQa5NV37v/Mc5T9cEOwtzgpf4NSJOehYPN2vPN6YvTWa/mB0M2q/qg8wHNvOJnJ6I2A1+vDdWfbz66s3BnFhvupcL6X1bradtX/PDotThhxMAAAAAAAAAAAAAAAAAAHSZ/a8BH5aRdHZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCB/d//P3bQ1ziyOZierNH1y0Bzctp5v+W6ufUMJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNf6EAAA//9rIKjm") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) socket(0x40000000015, 0x5, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.24081363s ago: executing program 8 (id=8366): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)={0x28, 0x140b, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000110}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r0, 0x2000002, 0x4b, 0x0, &(0x7f0000000200)="df33c9f7b9a600002000", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) syz_emit_ethernet(0x66, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xb, 0x4, 0x0, 0x3c, 0x58, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @timestamp_prespec={0x44, 0x4, 0xe6, 0x3, 0x1}, @rr={0x7, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x3, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r1, 0x0, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xb8, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x85, 0x6, "b7e41792cb5125b3c6bac8ce4986190e32574c4e1e1669a6c7f39fb4441afb0f24114340e10952e9c4c66db53744cc083e1cb9b69a1f0db89693a9b95cf0a794c81e625657d06fea6d128e35e6e847769dcce27b09055ec8ae802be515425d5ff784ab709809e90d00868fcd1b1246105dae7d78eec94af67624395baa8116ae64"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x6, 0x0, 0x8}}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0xc05, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELTABLE={0xec, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xab, 0x6, "949cfc17eb0c54170327b54ee4f571af27c64e35d277b3cee23a2de8738445e476873b120add4a188bb92daed4a9ab63bbcf9f9210de22094d4e59ada2d30f67422fec0aa6f8adf1f587300d91ee74fdf753609db09a60e2fbdae5e076e6d31005cf8fecac81ba4dc008555cf15351b548e40a96f3d219f9a0e8f362a3f5a3cd27b1e76335596f0c4687dc9a44c032cb6984339fcfe623313b8a4eb97c25fecbe7958815115ca0"}]}], {0x14, 0x10}}, 0x238}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x66, 0x54d, &(0x7f0000000200)="$eJzs3cFvI1cZAPBvHDsku9kmBQ5QiVJoYXcFa28a2kYcSishOFUCyr2ExBtF68Sr2Gk3UcVmxR+AhBAgcYILFyT+ACRUiQtHhFQJziBAIARbOHCADprxeDeb2LHTOnE2+f2kybyZeTPf95zMZJ5nNBPAufVURLwUEe+maXo1ImaL+aViiN3OkNV7596by9mQRJq++o8kkmJed1tJMb5YrDYVEV/7csQ3k4NxW9s7N5cajfpmMV1rr9+qtbZ3rq2tL63WV+sbCwvzzy++sPjc4vU+mZeO1M5LEfHiF//y/e/89Esv/vKzb/zxtb9d+VaW1kyxfG87ItKjbLp82MJO0yv5Z7F3hc2jRDjlynkLC9O9akwcmHP3mHMCAKC37Cz6gxHxyYi4GrMxcfjpLAAAAPAISr8wE/9NItLeJvvMBwAAAB4hpfwe2KRULe4FmIlSqVrt3MP74bhQajRb7c/caG5trHTulZ2LSunGWqN+vbhXeC4qSTY9n5cfTD+7b3ohIh6PiO/NTufT1eVmY2XcX34AAADAOXFxX///37Od/n/XnXEmBwAAAIzO3LgTAAAAAI7dsP3/C8ecBwAAAHB8XP8HAACAM+0rr7ySDWn3/dcrr29v3Wy+fm2l3rpZXd9ari43N29VV5vN1fyZfeuDttdoNm99Lja2btfa9Va71tqeivXm1kb7tbWHXoENAAAAnKDHP/7W75OI2P38dD5kJodbdchqwGlVvl9KinGP3foPj3XGfz6hpIATMTHuBICxKY87AWBsKuNOABi7ZMDyvjfv/KYYf2K0+QAAAKN3+aP9r/+XDl1z9/DFwKlnJ4bzy/V/OL/y6//D3snrZAHOlMqgM4BD9/k7I84GGIf3ff1/oDQ9UkIAAMDIzeRDUqqWu9OlUrUacSl/LUAlubHWqF+PiMci4nezlQ9k0/N5zWRgnwEAAAAAAAAAAAAAAAAAAAAAAAAA6EjTJFIAAADgTIso/TX5VedZ/pdnn5nZ//3AZPKf2SheEfrGj179we2ldntzPpv/z/vz2z8s5j87jm8wAAAA4FwY8AL/h3X76d1+PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0jv33lzuDicZ9+8vR8Rcr/jlmMrHU1GJiAv/SqK8Z70kIiZGEH86+/GRmDwYP8nSuh+yV/zpEcTfvZvH79H+PH7sFp9Cr/gXRxAfzrO3suPPS732v1I8lY9773/liIem36v+x7+4f/yb6LP/X/p0a6gYT7z981rf+HcjnigfiH8ni9CNn/SJ//SQbfzG13d2+i1Lfxxxuef/n6RbJTtCRq29fqvW2t65tra+tFpfrW8sLMw/v/jC4nOL12s31hr1zs80TdODMb77sV+8e1j7L/SJPzeg/c8c2Npkzxj/e/v2vQ91ipVe8a883SP+r39S1DgYv1T87/tUUc6WX+6WdzvlvZ782W+fPKz9K33aP+j3f6XfRve5+tVv/2nIqgDACWht79xcajTqm2e2kPXSh6ycnZ2dipyPq/By9K/T/Ys4JameSOFO/0VTQ/4lTDyY0+19vI/EkjgNH0teGOthCQAAOAYPTvrHnQkAAAAAAAAAAAAAAAAAAACcXyfxOLF9IaceFJNRPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAk/h8AAP//OPTYvw==") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 1.206281185s ago: executing program 5 (id=8367): bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002"], 0x190}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "223cfe8fe13ede62", "cfee63183d64a2a8dc06f4a0169309bb", "ae5288cc", "6a9ec75283ca13a5"}, 0x28) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x1d0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0xe}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x6, 0x96df, 0x2, 0x3, 0x80000000, 0x400, 0x4}}, {0xc, 0x2, [0x100, 0x3, 0x5, 0x8]}}]}, @TCA_STAB={0x15c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3, 0x6, 0xf7bb, 0x2, 0x9, 0x5, 0x2}}, {0x8, 0x2, [0x6, 0x4]}}, {{0x1c, 0x1, {0x0, 0xfe, 0x2708, 0x9, 0x2, 0x8000, 0x5, 0x1}}, {0x6, 0x2, [0x3de]}}, {{0x1c, 0x1, {0xf7, 0x7d, 0x2, 0xb3, 0x2, 0x8, 0x2, 0x8}}, {0x14, 0x2, [0x9, 0x797, 0xc34, 0x0, 0xbd08, 0xcad, 0x9, 0xf]}}, {{0x1c, 0x1, {0xa4, 0x7, 0x400, 0xfff, 0x1, 0x7, 0x1d2, 0x3}}, {0xa, 0x2, [0x4, 0xfffa, 0x7]}}, {{0x1c, 0x1, {0x10, 0x75, 0x6, 0x7, 0x0, 0x6, 0x5, 0x7}}, {0x12, 0x2, [0x7, 0x0, 0x2, 0x1, 0x4, 0xd, 0x3]}}, {{0x1c, 0x1, {0x5, 0xe, 0x200, 0xffffff7f, 0x0, 0xffff, 0xfffffff8, 0x6}}, {0x10, 0x2, [0x401, 0xd, 0x67ee, 0x7f, 0x2, 0x1]}}, {{0x1c, 0x1, {0x5, 0x0, 0x4, 0x6, 0x1, 0x34c3, 0xff, 0x8}}, {0x14, 0x2, [0x5b, 0x7, 0x1847, 0xffff, 0xfc, 0x7, 0x6, 0x6]}}, {{0x1c, 0x1, {0x2, 0xc2, 0x8000, 0x1, 0x2, 0x3ff, 0x11b1, 0x5}}, {0xe, 0x2, [0x4, 0x1ff, 0x1ff, 0x3, 0x1]}}]}]}, 0x1d0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.191259406s ago: executing program 7 (id=8368): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x103}, 0x100002, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x1ffffffffffffe47, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setuid(0x0) 1.035900067s ago: executing program 6 (id=8369): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5ef, 0x7}, 0x0, 0x0, 0x10000001, 0x8, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) listen(0xffffffffffffffff, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0x7fff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3, 0x0, 0x3}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xfffffffffffffff7) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setreuid(0xee01, 0x0) r4 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) socket$kcm(0x21, 0x5, 0xa) shmdt(r4) 982.718374ms ago: executing program 9 (id=8370): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9, 0x0, {}, 0x4}) pread64(r0, &(0x7f0000000200)=""/210, 0xd2, 0x8) pread64(r0, &(0x7f0000002240)=""/131, 0x83, 0xe5d7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getuid() 824.534414ms ago: executing program 7 (id=8371): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x1ffffffffffffe47, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setuid(0x0) 573.392586ms ago: executing program 8 (id=8372): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000000000000000000105000000080000"], 0x0, 0x2d, 0x0, 0x1}, 0x28) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0x5000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='3\b\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e0f1a1799a57db7278fc241a4f12ad34f2e31d2f93f8449d79f811c12257d25df07ada67c9de1bb2fe6fda9044828ae9ef875dc4b712e93d9f4908802e0e4468cf8a7f597d0c05778f0fc208ddeb4764f54ca75274fa801e2cef1249021392f0a04b01ec51a1e5690c449eb2dc892924b3bca4487c26c5fa0e32c26bd90e8265ebf5f2d61fc8173edebf8b8c8d35f326790fa81b4fbb68020c68fb6867c0032487886a18f3eaf9451f9270d49d58"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 555.249659ms ago: executing program 7 (id=8373): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x11, 0x14, &(0x7f0000002700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000052d654d207ea172a000007020000f8ffffffb703000008000000b704000000000000850000000301000095", @ANYRESDEC=r0, @ANYRES64=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x20}, 0x18) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb", 0xf}], 0x1) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000002540)=@assoc_value={0x0, 0xaff0}, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000001480)="7b62e512fb362f4765ca0c1142ed910f6a278ec1c5556c2cc27eef2cde4299d9720c6626b436467a6d41911c840f6ba13e87811cfeee5916c3408a346b674ac691b830f738479a1df6de4a7599e917b18e367be8690ba46e6ac911805fbdc9109160f2f3e18ad13fda719eeef32f769f2ce6c9fe2cb0732df123c9f81cb755af4be0767c6d4d87ae0342b4495476fac8eed2b15c0bac2b6766f21bcccc60fadf3c66798c0ae0b83dce312180ae612b12f3f1fbc314ef6479b961c3e29cf94e76a5afd8aa656c6d2198a6d2b5b63141842f3b6549f9d0d04f79780471b16433818223c4f15aaeca26c94db88bf8ca27cb80c9130d17496050e3de1c099d1af85747102644fba1feb447f0ba94cae0d7785afe0640a49236571aef2eb79176410372b87ebc512a5706e9d7a5abd1749ec354973fe93e3a307857eae696031a4322887789a4ab5ed719caf26596a119d86f063c57884d8fe14749b36e1bcb08c851d5938ce39802522a8fa40c15c21c58461d4cf0fca200b1b028346a44cf35a9e916b0f7948e7f7df5927a1b39310c2315df1cb88b9f14a96cb9a1194ebe5a218dd9de8b73cddad683aafb80d537bb59f4b4f29da8137bf7b9034a8d1351878c5f8eb83d3f4636ef8a5bf9b7c61d4cc8ddc7f53a2f3ab147e765f7f801849a55cd85bef92bead45cb604091dbb5f999bfe909e878db52cd0cbf53e2725a90da63ad5b453fba7ae613c7a095376e88d4311a8c823a261ad5da388532ce5313b502a84ecd048e4762633f5c3abc1db015a6ecc96982dbaa1bdbe3ea8bfdef6aeb1a2a429ed705e6f8ba94a7ed83a839690101b561736f1d4fc182f40be30b4b00153d2eb4e52bf7cd6461255c5b0085c17337864545139052e15a97fd0eb575bf6ca538473a433e97a1ef2ba50ee543bd6e77097cdf582e79640361caf87a17bd3b5ce0f14f1d23a319f4b0317b237d50cafc355c6f57f7148414cbc7bdf9300ccea55a6e57f33e4bad22aa1398142c727b84558b669efba63e0ae25f1d47d72fc13be3d71a87dc15f4b2919404d777e63439f361b05d7153cc2a91fd5e91b5a79d865092b916e6e699ffc16bfd587d420992cd07767eb0c271a9e3decef6f3603e9c18072880ececef64a5a08e21672c08066ea35c919b4c5a0acfa345d260f82dd929188f3db84c8860cf734b8a81e7a316bb73604babfbf6f87678876547cedd721419a13d7ef894309ead589118c295c51d82bf2e4f5d3f135410c5627495f8aecf720a67c900b18ec4f2ba260f51f4b62926db1df6362d209d9515308975d5f5ffa3c79545a0161339cb351a079ead9f125986181b3827a53b91fe2bb0026e24350385ff8d19cd8e559d13dfceb47ea3745a3887fe495e30694e608b6ecb13d693dec45e96daff55bc95e22e0a188db2f77c910bc262e18ec4267fea7990c3c222ba9e8e0ae99e7be29f40da5754e2dca02b23e0c65286cea8a2a105d1434af526910bd9eda9783145603093c3814cbdefbb0ac3a56b534ed425b8c7d6c40453e6015209e756acaa9cab594f7c10d137b191e3e1fac4fbdc5331ddec64f594fe5bfb3deb21bfb3a78dadd7003988e969f44e3fcc03593119635cf06c562b7ae4821200f690a28c8b4e103e85781b82c218524da473a4f4ac1ac2d22511198c3744f03cc216a0dad51e213d5ea98a878b577302d4d507230a2f2cd6801a1cdbcc5407757dd58fa94d0186a273fd3349e4698a2726526e74557b6442999f2b69a6eaaead672f903889e57833a438dd321d537326e2c80ade6120b51009db35656eb43699b4beec6791c04f59fd4b448d091e921285a28f0e6a33908870d7260a3d4b081e523c637520e230b6cd884cc7a0709d3007701bb45a8052a817c384bd2094fa42d6d99a1df4e2d8fd30be0afe07b5a66ed35da3813e97fb4d1ef719a731ca7aa8dad884b4cd48509a4b3e6e985205d269eeada369a7864ca4da707814f1711cdf2ca8f2bdd6c9f18e67985e21d987eeb39c42eabd5c3e93e29f8da5f4abda978005f0fc05c42f564d640cb42047baa53bd8be1d99414d9596851d870c9b9508a071dd6937c1a777cdef42afe1e95f1335c4cb0492fd6dd6f91719f5d2196673e1f03703fd4958358a41fb83e182cdc5cca3ad4cc0d61efaa8cd2a1ed331b12b087c82de1e183c65cf17a888d487c83a4ea4fcd6919333be6b0a0fa978c21ca4919faf601d63f75760473545d97e9773901cab9aa3ee7f42cc25889c236b7f34ebc6d27f7160f07280b2205147a4ad26061539cb28e21b62c376c181dd20b2542469ccec1f63cde8c5a463d9e6475cee5b6f3d5f535d6fe9667b8e7963bee301ac578815d4af07b6e0685bbd2604ac7bd074880c41820c82b9552b9ca217dae9e89af2ef9549f787e36eb06eddb64dce898acafcd868f5fd32a25991a28c32e8806d8861b526ff24a5c00df6e0f0d9d4c4a3db0e82ab2ea7d4141abd84740b6019c677579fe11d9c5c7132acb7ea6ba41865952bb0080c2a5a9b5b77cb2672fa87d3447811df074c495257a19a3ab4c40fdd73b5e84d3502e5d9347455389f3db8242496239329e632583d499dd24c33dae3fe23c598d839e0ff729eecc42d44eabfbce4148956a2f70502cab986dea617a3d1b0e0a226007c6bf795cffbeb36eab4f1916ce92175500ecb5e9afbb2c4e9c6f8db4652f456699cda6e17314f7b4097d2b280459e26b6eeb85619d44c13192c633c705501afceb3fd18ddcafeff42ba0ea5f1246b09c37750299467be39bd464e842e2d3544a6da785790a820e6a9621f8fba10b990387110e1e3a85eacc73e00e2093b63940f164822e8621da8f17da688e55c9cad0f6c623c970c52cf0c5cb124b3ce75003bea2727589281fbba1951aaefdf5e498e575f8bcf75dbbec345e0ddc96f649dc166e9544d3f435535dd46bb778fb502f23889266db44bc5028328b793816a22fd5c4e1f52f4462e3401f7eb6d1dce627bec835421ba89e9e887fc7dca23840f702113d60c7aa1e712aa81efd91d17e52824f4cc2d883639dbd79b9334a0a78c7f6fb83410a7a044649937063f4daa64adaee2a3ecbeb4df87ec228690ff885a4c4f8adbc1890937e9ebabe4ad60d78251ff0534cd8ae0f5048c8527981c973e8095093d4a56bbe2938a326de7ec15fae90ab46eaefd968c55d6b162ed2a0a100bc6ea74a0c6ba0af45f43d58110f2540c6ac37e2794ddfe2d8979e81af1df55f22b09145461f64b69ff4c466ebb56686eec48f4dd96511b7675063a03e5cc90ebe7e8f217f25e6c2c4ba7a5f4c8841a6ddf5dca552704180910ebc956962799170ce61d9a6914658b79eac898a12dc694300905f9cea86e83c92da7e36948190dd7644e7a94a501bd3cf01e4cc17fdd51c7c2ae10b13ea1c496507a3d1e2ffdce6c995a04bcc5ee5e007dbf366e86e9e4bca946166ceb7b3852bcfc9f07779b64103ddf680a039f8f34d0471fe7a28f5f4f1a4462a02f20ebbbac8c96c37143fe4994c530a8b1cbba062de210b981f73d5be394290d2b95a98c5588b0ec428f97b378cb9fee68d714388941a87b40b10ec41cf448fce9c327678bc43a92c0c107f973a139268420b82c3f7b0c860ba2dd52449d7c12aba391a8736a7393fffd32e743e9acfe8cfa7d9604c05abd860501fcc9ccaa76af259a2d3db0e1685c9320a602463c62d00585afa9d115f333370589498d29ed2810b24cae9e871db159b0bb5751988bca5277e5741d8741a2c6605d5323b456537847ae1ab97db16f41343b2c1fdd5416648f0b41c7f9e21122265782f70e4081c87186c801409081743632cc0c4a5c9b1f7d204e1a1a5d69f377e7645f89e1e3fc278ba29a6a93e712a0632526bf148731cb6dab75a9bea89978f315b24d76e29da345996282c845f156e580044bd941803ed09284c66b50e02e8a57558a54cde0c346cf1a4130c59d0099afde8d4224d3bec35c3925022512c01d2e312c2a2b98bd3d43c787a3b48c37d68f8ee437f54f2dd4066b56999ed907e745e2d7337ae2d13ef8e1ea54dd91cbfc717a9354719374ee02ced1d3cc68fdf42439eb0a60fd9f0f87c4d2f54935520e9dadff1038820ffe830d49dd76103609b034f7f99740d78e2f780353e29eae594f7b2612b27fb3ff541f7201cbcd1092057136e16c1f857ad4a86e218b282f1c651d6012a60d425c4f50b26e6715b43f38c5daf2cb2ee89ad83183527667caec35eef43ef3a12917a9ef6bea6148ea730135d7edb64bd81bd7d883d9ac7706124d1a7f0365409e1104cfc109a23aadf03b9661274479e2ebdd219c4df6c4f06c59cf6f8de45d25a38ddf01e3c014dc1ade027ebc63008f5b5ff2fca656136c54d26ee9ede5e59edb1f6481099af1e82b6ab89c1fddaedb835cc7579919268c70b2e5c1401a9f2b5a70a15d3b15dc55e8f0ba678d27a90b00a24d5192a4d45261955d507f3b1919de7a944adea8168796ac09b09ac3da3a835906a139dab8f779e35d3374e404d6dc4e7a358968e49b7825e9e1c5485cacf1b03587dea4fc7322d831e406f6f1bf2f4bfa9ba16880a178a98f0a98236859e0ead67e63b817d10b90c141a54543145cb85f833618d6c52e0fea4547a74b5f43d127a0cb2ba5740682ee89fe52454719e3d1caa4fbd2ce89194b6af0dbd6c756224560428de86d7a0c75f2fc36b1aa20f5e78f06317ebc64cbe3a1438a0be8d83de862f906708801318d1705fe3e7e2ad0f9a1a53fdf0682172fd5cc7b992b284da22cd6fae1d7682fa681dd900c8f6e082322b87937b0e3d63d3a9f30ddd5ea74b1e222c8166605c77e0c9c50d67c5739d75f76b564e180a2c1777c07e8466d95f2380f6aeffd17259041b5d9f1ae40febf904002d2903d6cca90be67c533dfbe28cf032b34e10cf2c94e5358bd3abfb09219444792e0975cc34c44f485f146e42effe4d6ba9f4f1698af431a3366ecfe24b3f483fe11914088bad8e62cc133c4bbb365c4c7300499260cf7c76b4aa35353296c984c378987c9dff60dd7b01bc2520345cd2aff2396795e110e1e2316b6d4a3d7683227963fe768ce2b2f5c72628939f57e0c6ae253c012a4f4b32382b7a9c2d431f0f39947197add41c64a55f364c34e1c45e153ac86333b0d09aa3ff80eabcf01a8e2130e90ddc65772e85c9fa461297d79a40aa335cb1eec568153b976a5b247a4314418362a7face031cc4a367da59a21c9c3ef8caf6d51a6c365c2270bc2f1430b67cfb1a01f54b5750b085648a9769f4343133e0aab4d831fb4811b63e4ef711dd1c75a46660c63cdecfd1224ce189a0485f4ad32775e1e647bdb3efd980b6e514b58c723631d54c6bfe39f6e8ead7b7804fe840daeedccf90fae0a451c5a604f55fe7aeb4554645d0ad8db31de691b6f1fcb6bc0c6e7cd070c065df36bd67e9398b2a101818957ff1ded35486bff494db857718cbe013f7c04d1e5bf52dc332a6acc9907c9f043f704aa6864fe79b5f77677d107cd1298d03e27ce09cf20eacefa9f17771f01d46fdc75585129b76f12fe89019d1487f1a3ee441eaa92a829ee6ffe5489452ad52ebf4c2c6fbc22cfb572d13f3c18ae1b0b02c5ebebbd84a0a3d0f3c5591af68cdf0107fefdf6a4d8bb3b1e519f401bd4137d2e3b0ec1e1277329805dcd3b89236d8476733e3c0b4586e55fc3f6a74c78baf7b44c98da230a1ab7476c294a6fa47c0a7e133e6877f87576eb9a7d0d54cb95c57f83df71513db8d4cf8f32756421acb7386d0d60413b6d321f3cde4") r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516337ce06bbace8017cbec4c2ee5a7cef4090000001fb79119d0d68898b8a722a2643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x60044084) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x6, 0x4, &(0x7f0000002480)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002a000000950000000000000004c999f1b8a3393877e44f53e31f222fbfcce0a43f6d98ae1330a4e2179e62fbb835045389ba9d1b2d9c69e1bc83d4600a480dc02ca3a8ff873d63dc2ac51ece16f1d349c65a2eaa7c07c1137c1b0381375dfa769058f1ed3b154ef1a1"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x27, 0xe, 0x2, &(0x7f00000003c0)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) recvmsg(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)=""/219, 0xdb}], 0x1}, 0x40000041) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r11 = dup(r6) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r12, 0x0, 0x1}, 0x18) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 536.142731ms ago: executing program 6 (id=8374): bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002"], 0x190}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "223cfe8fe13ede62", "cfee63183d64a2a8dc06f4a0169309bb", "ae5288cc", "6a9ec75283ca13a5"}, 0x28) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x1d0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0xe}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x6, 0x96df, 0x2, 0x3, 0x80000000, 0x400, 0x4}}, {0xc, 0x2, [0x100, 0x3, 0x5, 0x8]}}]}, @TCA_STAB={0x15c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3, 0x6, 0xf7bb, 0x2, 0x9, 0x5, 0x2}}, {0x8, 0x2, [0x6, 0x4]}}, {{0x1c, 0x1, {0x0, 0xfe, 0x2708, 0x9, 0x2, 0x8000, 0x5, 0x1}}, {0x6, 0x2, [0x3de]}}, {{0x1c, 0x1, {0xf7, 0x7d, 0x2, 0xb3, 0x2, 0x8, 0x2, 0x8}}, {0x14, 0x2, [0x9, 0x797, 0xc34, 0x0, 0xbd08, 0xcad, 0x9, 0xf]}}, {{0x1c, 0x1, {0xa4, 0x7, 0x400, 0xfff, 0x1, 0x7, 0x1d2, 0x3}}, {0xa, 0x2, [0x4, 0xfffa, 0x7]}}, {{0x1c, 0x1, {0x10, 0x75, 0x6, 0x7, 0x0, 0x6, 0x5, 0x7}}, {0x12, 0x2, [0x7, 0x0, 0x2, 0x1, 0x4, 0xd, 0x3]}}, {{0x1c, 0x1, {0x5, 0xe, 0x200, 0xffffff7f, 0x0, 0xffff, 0xfffffff8, 0x6}}, {0x10, 0x2, [0x401, 0xd, 0x67ee, 0x7f, 0x2, 0x1]}}, {{0x1c, 0x1, {0x5, 0x0, 0x4, 0x6, 0x1, 0x34c3, 0xff, 0x9}}, {0x16, 0x2, [0x5b, 0x7, 0x1847, 0xffff, 0xfc, 0x7, 0x6, 0x6, 0x4]}}, {{0x1c, 0x1, {0x2, 0xc2, 0x8000, 0x1, 0x2, 0x3ff, 0x11b1, 0x4}}, {0xc, 0x2, [0x1ff, 0x1ff, 0x3, 0x1]}}]}]}, 0x1d0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 489.735997ms ago: executing program 9 (id=8375): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x2000002, 0x4b, 0x0, &(0x7f0000000200)="df33c9f7b9a600002000", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) syz_emit_ethernet(0x66, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xb, 0x4, 0x0, 0x3c, 0x58, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @timestamp_prespec={0x44, 0x4, 0xe6, 0x3, 0x1}, @rr={0x7, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x3, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r2, 0x0, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xb8, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x85, 0x6, "b7e41792cb5125b3c6bac8ce4986190e32574c4e1e1669a6c7f39fb4441afb0f24114340e10952e9c4c66db53744cc083e1cb9b69a1f0db89693a9b95cf0a794c81e625657d06fea6d128e35e6e847769dcce27b09055ec8ae802be515425d5ff784ab709809e90d00868fcd1b1246105dae7d78eec94af67624395baa8116ae64"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x6, 0x0, 0x8}}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0xc05, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELTABLE={0xec, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xab, 0x6, "949cfc17eb0c54170327b54ee4f571af27c64e35d277b3cee23a2de8738445e476873b120add4a188bb92daed4a9ab63bbcf9f9210de22094d4e59ada2d30f67422fec0aa6f8adf1f587300d91ee74fdf753609db09a60e2fbdae5e076e6d31005cf8fecac81ba4dc008555cf15351b548e40a96f3d219f9a0e8f362a3f5a3cd27b1e76335596f0c4687dc9a44c032cb6984339fcfe623313b8a4eb97c25fecbe7958815115ca0"}]}], {0x14, 0x10}}, 0x238}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x66, 0x54d, &(0x7f0000000200)="$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") r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 166.496509ms ago: executing program 5 (id=8376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req={0x80000001, 0xfffffffa, 0x6, 0x8}, 0x10) sync() sync() getpid() fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x20, 0x10, 0x8, 0x10, {{0x7, 0x4, 0x3, 0x1, 0x1c, 0x65, 0x0, 0x1a, 0x4, 0x0, @private=0xa010101, @broadcast, {[@ra={0x94, 0x4}, @end]}}}}}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0200001800000227bd7000fcdbdf2500000000000000000000000000000000ac1414bb0000000000000000000000004e2335e04e200000020000202f000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="fe8000000000000000000000000000bb000004d33300000000000000000000000000ffffac1e0001060000000000000002000000000000000000000000000000ff0300000000000006000000000000000000000000000000050000000000000007000000000000000400000000000000070000000000000001000000000000000900000000000000018000005a0000000500000028bd700000000000020003e4010000000000000000000000000000004c0012007266633431303628726663343130362861656769733235362d67656e6572696329290000000000000000000000000000000000000000000000000000000000000000000000020000e40006000a010100000000000000000000000000ffffffff0000000000000000000000004e24ffff4e2400070a00808089000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d63c000000e00000020000000000dfff000000b932671500000000000000080000000000009d0d00000000000009000000000000007c6af3342ce98610cfdb0140f0fa0001000000000000070000000000000005000000000000000900000000000000070000000000000002000000000000000100000000e83a26890d000000ff7f0000000000000100000040000000070000002abd7000000000000a0000028e000000000000", @ANYRES32=0x0, @ANYBLOB="0200000008001d00080000000c000800080008000105000008001600ff0700000c000f000700000000000000"], 0x25c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x101140, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000300), &(0x7f0000000280)=@v3={0x3000000, [{0x3ff, 0x9}, {0x9, 0x9}], r2}, 0x18, 0x2) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x8000, 0x0) ioctl$RTC_PIE_OFF(r5, 0x7006) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000080)='./file0\x00', r7, 0x4000, r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgget$private(0x0, 0x59dbbd5d3f87a2e4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) set_tid_address(0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000000180)=""/53}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r8, 0x0, 0x2}, 0x18) 0s ago: executing program 9 (id=8377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req={0x80000001, 0xfffffffa, 0x6, 0x8}, 0x10) sync() sync() getpid() fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x20, 0x10, 0x8, 0x10, {{0x7, 0x4, 0x3, 0x1, 0x1c, 0x65, 0x0, 0x1a, 0x4, 0x0, @private=0xa010101, @broadcast, {[@ra={0x94, 0x4}, @end]}}}}}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0200001800000227bd7000fcdbdf2500000000000000000000000000000000ac1414bb0000000000000000000000004e2335e04e200000020000202f000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d63c000000e00000020000000000dfff000000b932671500000000000000080000000000009d0d00000000000009000000000000007c6af3342ce98610cfdb0140f0fa0001000000000000070000000000000005000000000000000900000000000000070000000000000002000000000000000100000000e83a26890d000000ff7f0000000000000100000040000000070000002abd7000000000000a0000028e000000000000", @ANYRES32=0x0, @ANYBLOB="0200000008001d00080000000c000800080008000105000008001600ff0700000c000f000700000000000000"], 0x25c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x101140, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000300), &(0x7f0000000280)=@v3={0x3000000, [{0x3ff, 0x9}, {0x9, 0x9}], r2}, 0x18, 0x2) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x8000, 0x0) ioctl$RTC_PIE_OFF(r5, 0x7006) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000080)='./file0\x00', r7, 0x4000, r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgget$private(0x0, 0x59dbbd5d3f87a2e4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) set_tid_address(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r8, 0x0, 0x2}, 0x18) kernel console output (not intermixed with test programs): open } for pid=25339 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth21.dhcp" dev="tmpfs" ino=10880 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 673.299975][ T29] audit: type=1400 audit(1768281740.274:149063): avc: denied { getattr } for pid=25339 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth21.dhcp" dev="tmpfs" ino=10880 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 673.326783][ T29] audit: type=1400 audit(1768281740.274:149064): avc: denied { search } for pid=25339 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.349247][ T29] audit: type=1400 audit(1768281740.274:149065): avc: denied { search } for pid=25339 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.372393][ T29] audit: type=1400 audit(1768281740.274:149066): avc: denied { search } for pid=25339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.592198][T25378] Invalid ELF header magic: != ELF [ 673.754752][T25366] loop8: detected capacity change from 0 to 512 [ 673.867570][T25366] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.7474: EA inode hash validation failed [ 674.047063][T25366] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.7474: corrupted inode contents [ 674.172662][T25366] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #15: comm syz.8.7474: mark_inode_dirty error [ 674.209868][T25366] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.7474: corrupted inode contents [ 674.257559][T25366] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3000: inode #15: comm syz.8.7474: mark_inode_dirty error [ 674.351344][T25366] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3003: inode #15: comm syz.8.7474: mark inode dirty (error -117) [ 674.426133][T25366] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 674.530475][T25366] EXT4-fs (loop8): 1 orphan inode deleted [ 674.547618][T25366] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.756514][T25408] can0: slcan on ttyS3. [ 674.835992][T25413] can0 (unregistered): slcan off ttyS3. [ 674.856249][T16857] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.951163][T25175] veth0_vlan: entered promiscuous mode [ 675.042952][T25175] veth1_vlan: entered promiscuous mode [ 675.260579][T25175] veth0_macvtap: entered promiscuous mode [ 675.308651][T25175] veth1_macvtap: entered promiscuous mode [ 675.349892][T25420] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 675.371691][T25175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.389887][T25175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.436049][ T802] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.444864][ T802] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.458176][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7482'. [ 675.493185][ T802] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.519618][T24512] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.507696][T25423] IPVS: Unknown mcast interface: veth0_virt_wifi [ 676.556907][T25423] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7484'. [ 676.668459][T25423] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7484'. [ 676.713849][T25450] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 676.941728][T25442] loop8: detected capacity change from 0 to 1024 [ 676.968718][T25442] EXT4-fs: inline encryption not supported [ 677.051702][T25442] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.219296][T16857] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.495064][T25458] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 677.715729][T25475] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 677.928440][T25481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7501'. [ 678.060238][T25486] can0: slcan on ttyS3. [ 678.116059][T25489] can0 (unregistered): slcan off ttyS3. [ 678.160616][ T29] kauditd_printk_skb: 2222 callbacks suppressed [ 678.160633][ T29] audit: type=1400 audit(1768281745.294:150923): avc: denied { bpf } for pid=25484 comm="syz.5.7503" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.187907][ T29] audit: type=1400 audit(1768281745.294:150924): avc: denied { perfmon } for pid=25488 comm="syz.6.7505" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.209216][ T29] audit: type=1400 audit(1768281745.294:150925): avc: denied { perfmon } for pid=25484 comm="syz.5.7503" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.230529][ T29] audit: type=1400 audit(1768281745.294:150926): avc: denied { perfmon } for pid=25488 comm="syz.6.7505" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.251698][ T29] audit: type=1400 audit(1768281745.294:150927): avc: denied { perfmon } for pid=25488 comm="syz.6.7505" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.272956][ T29] audit: type=1400 audit(1768281745.294:150928): avc: denied { perfmon } for pid=25488 comm="syz.6.7505" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.294140][ T29] audit: type=1400 audit(1768281745.294:150929): avc: denied { bpf } for pid=25488 comm="syz.6.7505" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.335356][ T29] audit: type=1400 audit(1768281745.334:150930): avc: denied { bpf } for pid=25484 comm="syz.5.7503" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.356335][ T29] audit: type=1400 audit(1768281745.334:150931): avc: denied { perfmon } for pid=25484 comm="syz.5.7503" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.377531][ T29] audit: type=1400 audit(1768281745.334:150932): avc: denied { bpf } for pid=25485 comm="syz.8.7504" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.441273][T25486] netlink: 'syz.5.7503': attribute type 4 has an invalid length. [ 678.449178][T25486] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7503'. [ 678.515541][T25486] .`: renamed from bond0 (while UP) [ 679.650682][T25502] chnl_net:caif_netlink_parms(): no params data found [ 679.832274][T25502] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.839828][T25502] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.932523][T25502] bridge_slave_0: entered allmulticast mode [ 679.939091][T25502] bridge_slave_0: entered promiscuous mode [ 679.961781][T25502] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.969086][T25502] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.012810][T25502] bridge_slave_1: entered allmulticast mode [ 680.019638][T25502] bridge_slave_1: entered promiscuous mode [ 680.059175][T25502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.090540][T25502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.192157][T25502] team0: Port device team_slave_0 added [ 680.227223][T25502] team0: Port device team_slave_1 added [ 680.306652][T25502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.313804][T25502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.339903][T25502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.418830][T25502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.425864][T25502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.452020][T25502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.602433][T25502] hsr_slave_0: entered promiscuous mode [ 680.622503][T25502] hsr_slave_1: entered promiscuous mode [ 680.632068][T25502] debugfs: 'hsr0' already exists in 'hsr' [ 680.637898][T25502] Cannot create hsr debugfs directory [ 681.252619][T25502] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 681.297646][T25502] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 681.319423][T25502] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 681.342696][T25502] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 681.639301][T25581] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 681.822634][T25502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.917267][T25590] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 681.943250][T25502] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.992191][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.999363][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.060982][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.068257][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.631696][T25605] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 682.871306][T25502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.998467][T25611] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7541'. [ 683.167089][ T29] kauditd_printk_skb: 1590 callbacks suppressed [ 683.167107][ T29] audit: type=1400 audit(1768281750.304:152523): avc: denied { sys_module } for pid=25502 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 683.267908][ T29] audit: type=1400 audit(1768281750.304:152524): avc: denied { module_request } for pid=25502 comm="syz-executor" kmod="netdevsim7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 683.290249][ T29] audit: type=1400 audit(1768281750.344:152525): avc: denied { perfmon } for pid=25619 comm="syz.8.7544" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 683.310251][T25620] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.311689][ T29] audit: type=1400 audit(1768281750.344:152526): avc: denied { map_create } for pid=25619 comm="syz.8.7544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 683.318021][T25620] audit: audit_lost=1469 audit_rate_limit=0 audit_backlog_limit=64 [ 683.337654][ T29] audit: type=1400 audit(1768281750.354:152527): avc: denied { prog_load } for pid=25619 comm="syz.8.7544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 683.345337][T25620] audit: backlog limit exceeded [ 683.364729][ T29] audit: type=1400 audit(1768281750.354:152528): avc: denied { bpf } for pid=25619 comm="syz.8.7544" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 683.377369][T25620] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.969695][T25641] can0: slcan on ttyS3. [ 684.056375][T25641] can0 (unregistered): slcan off ttyS3. [ 684.192894][T25641] netlink: 'syz.9.7547': attribute type 4 has an invalid length. [ 684.200745][T25641] netlink: 152 bytes leftover after parsing attributes in process `syz.9.7547'. [ 684.343000][T25502] veth0_vlan: entered promiscuous mode [ 684.410382][T25502] veth1_vlan: entered promiscuous mode [ 684.602914][T25502] veth0_macvtap: entered promiscuous mode [ 684.653804][T25650] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 684.677629][T25502] veth1_macvtap: entered promiscuous mode [ 684.766160][T25502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.788259][T25502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.843577][ T1618] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.896515][ T1618] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.905460][ T1618] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.951512][T25655] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 684.966314][ T1618] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.269521][T25667] can0: slcan on ttyS3. [ 685.316739][T25667] can0 (unregistered): slcan off ttyS3. [ 685.382108][T25668] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7556'. [ 685.551767][T25667] netlink: 'syz.9.7555': attribute type 4 has an invalid length. [ 685.559876][T25667] netlink: 152 bytes leftover after parsing attributes in process `syz.9.7555'. [ 686.531226][T25698] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 686.720074][T25707] can0: slcan on ttyS3. [ 686.831197][T25707] can0 (unregistered): slcan off ttyS3. [ 686.948381][T25707] netlink: 'syz.6.7566': attribute type 4 has an invalid length. [ 686.956259][T25707] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7566'. [ 687.843048][T25715] IPVS: Unknown mcast interface: veth0_virt_wifi [ 687.907870][T25715] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7569'. [ 687.995433][T25715] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7569'. [ 688.183485][ T29] kauditd_printk_skb: 2300 callbacks suppressed [ 688.183503][ T29] audit: type=1326 audit(1768281755.314:154827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25730 comm="syz.9.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2aaab72005 code=0x7ffc0000 [ 688.280281][ T29] audit: type=1326 audit(1768281755.314:154828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25730 comm="syz.9.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaab3f749 code=0x7ffc0000 [ 688.304156][ T29] audit: type=1326 audit(1768281755.314:154829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25730 comm="syz.9.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaab3f749 code=0x7ffc0000 [ 688.328041][ T29] audit: type=1400 audit(1768281755.334:154830): avc: denied { map } for pid=25734 comm="syz.6.7577" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=98654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 688.352535][ T29] audit: type=1400 audit(1768281755.334:154831): avc: denied { read write } for pid=25734 comm="syz.6.7577" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=98654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 688.377675][ T29] audit: type=1326 audit(1768281755.354:154832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25739 comm="syz.8.7578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3df99f749 code=0x7ffc0000 [ 688.401454][ T29] audit: type=1326 audit(1768281755.354:154833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25739 comm="syz.8.7578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3df99f749 code=0x7ffc0000 [ 688.425241][ T29] audit: type=1326 audit(1768281755.354:154834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25739 comm="syz.8.7578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3df99f749 code=0x7ffc0000 [ 688.449346][ T29] audit: type=1400 audit(1768281755.354:154835): avc: denied { map_create } for pid=25739 comm="syz.8.7578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 688.469033][ T29] audit: type=1400 audit(1768281755.354:154836): avc: denied { bpf } for pid=25739 comm="syz.8.7578" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 690.215058][T25791] loop8: detected capacity change from 0 to 256 [ 690.439533][T25798] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 690.455189][T25781] IPVS: stopping master sync thread 25798 ... [ 690.501828][T25781] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7590'. [ 690.624624][T25781] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7590'. [ 690.852307][T25804] loop8: detected capacity change from 0 to 512 [ 690.917077][T25804] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.7598: EA inode hash validation failed [ 690.930020][T25804] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.7598: corrupted inode contents [ 690.942864][T25804] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #15: comm syz.8.7598: mark_inode_dirty error [ 690.960562][T25804] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.7598: corrupted inode contents [ 691.047160][T25804] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3000: inode #15: comm syz.8.7598: mark_inode_dirty error [ 691.102137][T25804] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3003: inode #15: comm syz.8.7598: mark inode dirty (error -117) [ 691.177380][T25804] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 691.208523][T25804] EXT4-fs (loop8): 1 orphan inode deleted [ 691.235552][T25804] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.381214][T16857] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.875267][T25829] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7607'. [ 691.917110][T25829] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7607'. [ 692.109515][T25836] can0: slcan on ttyS3. [ 692.173170][T25836] can0 (unregistered): slcan off ttyS3. [ 692.378300][T25836] netlink: 'syz.9.7608': attribute type 4 has an invalid length. [ 692.386272][T25836] netlink: 152 bytes leftover after parsing attributes in process `syz.9.7608'. [ 692.608009][T25849] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 692.860359][T25857] can0: slcan on ttyS3. [ 692.866367][T25860] loop8: detected capacity change from 0 to 512 [ 692.875687][T25860] EXT4-fs (loop8): blocks per group (8192) and clusters per group (2304) inconsistent [ 692.938130][T25857] can0 (unregistered): slcan off ttyS3. [ 693.071756][T25857] netlink: 'syz.9.7614': attribute type 4 has an invalid length. [ 693.079637][T25857] netlink: 152 bytes leftover after parsing attributes in process `syz.9.7614'. [ 693.183593][T25865] loop8: detected capacity change from 0 to 512 [ 693.195217][ T29] kauditd_printk_skb: 1820 callbacks suppressed [ 693.195237][ T29] audit: type=1400 audit(1768281760.324:156645): avc: denied { write } for pid=25855 comm="syz.9.7614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 693.221400][ T29] audit: type=1400 audit(1768281760.324:156646): avc: denied { connect } for pid=25855 comm="syz.9.7614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 693.241546][ T29] audit: type=1400 audit(1768281760.324:156647): avc: denied { name_connect } for pid=25855 comm="syz.9.7614" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 693.264145][ T29] audit: type=1326 audit(1768281760.324:156648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25851 comm="syz.7.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c648765e7 code=0x7ffc0000 [ 693.287857][ T29] audit: type=1326 audit(1768281760.324:156649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25851 comm="syz.7.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c6481b829 code=0x7ffc0000 [ 693.311650][ T29] audit: type=1326 audit(1768281760.324:156650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25851 comm="syz.7.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6487f749 code=0x7ffc0000 [ 693.342143][ T29] audit: type=1326 audit(1768281760.344:156651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25851 comm="syz.7.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c648765e7 code=0x7ffc0000 [ 693.348647][T25865] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.7617: EA inode hash validation failed [ 693.366036][ T29] audit: type=1326 audit(1768281760.344:156652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25851 comm="syz.7.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c6481b829 code=0x7ffc0000 [ 693.402233][ T29] audit: type=1326 audit(1768281760.344:156653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25851 comm="syz.7.7613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6487f749 code=0x7ffc0000 [ 693.426222][ T29] audit: type=1326 audit(1768281760.344:156654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25864 comm="syz.8.7617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc3df99e3aa code=0x7ffc0000 [ 693.476095][T25865] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.7617: corrupted inode contents [ 693.516634][T25865] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #15: comm syz.8.7617: mark_inode_dirty error [ 693.542286][T25865] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.7617: corrupted inode contents [ 693.578713][T25865] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3000: inode #15: comm syz.8.7617: mark_inode_dirty error [ 693.607650][T25865] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3003: inode #15: comm syz.8.7617: mark inode dirty (error -117) [ 693.627051][T25868] can0: slcan on ttyS3. [ 693.633758][T25865] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 693.644634][T25865] EXT4-fs (loop8): 1 orphan inode deleted [ 693.695843][T25868] can0 (unregistered): slcan off ttyS3. [ 693.728431][T25865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.731263][T25870] can0: slcan on ttyS3. [ 693.885946][T25870] can0 (unregistered): slcan off ttyS3. [ 693.914037][T16857] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.003585][T25868] netlink: 'syz.5.7618': attribute type 4 has an invalid length. [ 694.011452][T25868] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7618'. [ 694.294395][T25881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7621'. [ 694.327881][T25880] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 695.005984][T25897] can0: slcan on ttyS3. [ 695.045905][T25897] can0 (unregistered): slcan off ttyS3. [ 695.152580][T25897] netlink: 'syz.9.7627': attribute type 4 has an invalid length. [ 695.160600][T25897] netlink: 152 bytes leftover after parsing attributes in process `syz.9.7627'. [ 696.508775][T25914] IPVS: Unknown mcast interface: veth0_virt_wifi [ 696.553194][T25914] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7633'. [ 696.639075][T25914] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7633'. [ 696.769576][T25935] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7642'. [ 697.309613][T25947] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 698.133406][T25967] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7653'. [ 698.207591][ T29] kauditd_printk_skb: 1285 callbacks suppressed [ 698.207627][ T29] audit: type=1400 audit(1768281765.344:157940): avc: denied { create } for pid=25968 comm="syz.5.7654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 698.265817][ T29] audit: type=1400 audit(1768281765.364:157941): avc: denied { prog_load } for pid=25970 comm="syz.9.7655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 698.285237][ T29] audit: type=1400 audit(1768281765.374:157942): avc: denied { bpf } for pid=25970 comm="syz.9.7655" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 698.306236][ T29] audit: type=1400 audit(1768281765.374:157943): avc: denied { perfmon } for pid=25970 comm="syz.9.7655" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 698.327658][ T29] audit: type=1400 audit(1768281765.374:157944): avc: denied { open } for pid=25968 comm="syz.5.7654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 698.347325][ T29] audit: type=1400 audit(1768281765.374:157945): avc: denied { perfmon } for pid=25968 comm="syz.5.7654" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 698.368563][ T29] audit: type=1400 audit(1768281765.374:157946): avc: denied { kernel } for pid=25968 comm="syz.5.7654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 698.388274][ T29] audit: type=1400 audit(1768281765.384:157947): avc: denied { perfmon } for pid=25968 comm="syz.5.7654" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 698.409790][ T29] audit: type=1400 audit(1768281765.384:157948): avc: denied { tracepoint } for pid=25968 comm="syz.5.7654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 698.528356][T25971] audit: audit_backlog=65 > audit_backlog_limit=64 [ 699.035684][T25993] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 699.460497][T26005] loop8: detected capacity change from 0 to 512 [ 699.534829][T26005] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.7665: EA inode hash validation failed [ 699.568237][T26005] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.7665: corrupted inode contents [ 699.580567][T26005] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #15: comm syz.8.7665: mark_inode_dirty error [ 699.592853][T26005] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.7665: corrupted inode contents [ 699.616319][T26005] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3000: inode #15: comm syz.8.7665: mark_inode_dirty error [ 699.648008][T26005] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3003: inode #15: comm syz.8.7665: mark inode dirty (error -117) [ 699.680271][T26005] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 699.715867][T26005] EXT4-fs (loop8): 1 orphan inode deleted [ 699.738259][T26005] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.774657][T26016] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 699.884214][T16857] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.043166][T26021] netlink: 'syz.9.7670': attribute type 7 has an invalid length. [ 700.987709][T26049] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 701.307158][T26058] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7683'. [ 701.781039][T26068] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.7687'. [ 701.826334][T26068] netlink: zone id is out of range [ 701.831511][T26068] netlink: zone id is out of range [ 701.865664][T26068] netlink: zone id is out of range [ 701.870889][T26068] netlink: zone id is out of range [ 701.908832][T26068] netlink: zone id is out of range [ 701.914023][T26068] netlink: zone id is out of range [ 701.919254][T26068] netlink: zone id is out of range [ 702.488063][T26087] loop8: detected capacity change from 0 to 128 [ 702.538320][T26087] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 702.573876][T26087] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 702.846369][T16857] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 702.987967][T26096] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7697'. [ 703.000642][T26096] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7697'. [ 703.216789][ T29] kauditd_printk_skb: 1999 callbacks suppressed [ 703.216809][ T29] audit: type=1400 audit(1768281770.354:159904): avc: denied { write } for pid=26095 comm="syz.7.7697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 703.381094][ T29] audit: type=1400 audit(1768281770.384:159905): avc: denied { create } for pid=26098 comm="syz.9.7700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 703.401227][ T29] audit: type=1400 audit(1768281770.384:159906): avc: denied { setopt } for pid=26098 comm="syz.9.7700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 703.421374][ T29] audit: type=1400 audit(1768281770.384:159907): avc: denied { create } for pid=26098 comm="syz.9.7700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 703.441392][ T29] audit: type=1400 audit(1768281770.394:159908): avc: denied { setopt } for pid=26098 comm="syz.9.7700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 703.461357][ T29] audit: type=1400 audit(1768281770.394:159909): avc: denied { ioctl } for pid=26098 comm="syz.9.7700" path="socket:[99275]" dev="sockfs" ino=99275 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 703.486790][ T29] audit: type=1400 audit(1768281770.414:159910): avc: denied { read write } for pid=16857 comm="syz-executor" name="loop8" dev="devtmpfs" ino=901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 703.511360][ T29] audit: type=1400 audit(1768281770.414:159911): avc: denied { write } for pid=26098 comm="syz.9.7700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 703.531280][ T29] audit: type=1400 audit(1768281770.424:159912): avc: denied { read write open } for pid=16857 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 703.556711][ T29] audit: type=1400 audit(1768281770.424:159913): avc: denied { prog_load } for pid=26095 comm="syz.7.7697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 703.757128][T26114] can0: slcan on ttyS3. [ 703.806567][T26114] can0 (unregistered): slcan off ttyS3. [ 703.905727][T26114] netlink: 'syz.8.7702': attribute type 4 has an invalid length. [ 703.913571][T26114] netlink: 152 bytes leftover after parsing attributes in process `syz.8.7702'. [ 704.245659][T26127] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7707'. [ 704.268440][T26127] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7707'. [ 704.448623][T26132] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 706.367873][T26189] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7727'. [ 706.380291][T26193] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.7728'. [ 706.443858][T26193] net_ratelimit: 45 callbacks suppressed [ 706.443875][T26193] netlink: zone id is out of range [ 706.454811][T26193] netlink: zone id is out of range [ 706.562543][T26193] netlink: zone id is out of range [ 706.567777][T26193] netlink: zone id is out of range [ 706.628791][T26193] netlink: zone id is out of range [ 706.634022][T26193] netlink: zone id is out of range [ 706.639244][T26193] netlink: zone id is out of range [ 706.644380][T26193] netlink: zone id is out of range [ 706.649565][T26193] netlink: zone id is out of range [ 706.654736][T26193] netlink: zone id is out of range [ 707.400168][T26214] can0: slcan on ttyS3. [ 707.501105][T26214] can0 (unregistered): slcan off ttyS3. [ 707.622648][T26223] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7738'. [ 707.641803][T26214] netlink: 'syz.7.7734': attribute type 4 has an invalid length. [ 707.648031][T26223] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7738'. [ 707.650169][T26214] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7734'. [ 707.918393][T26214] .`: renamed from bond0 (while UP) [ 708.327219][ T29] kauditd_printk_skb: 1779 callbacks suppressed [ 708.327233][ T29] audit: type=1400 audit(708.312:161573): avc: denied { map_create } for pid=26238 comm="syz.6.7742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 708.400661][ T29] audit: type=1400 audit(708.342:161574): avc: denied { prog_load } for pid=26238 comm="syz.6.7742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 708.419713][ T29] audit: type=1400 audit(708.342:161575): avc: denied { bpf } for pid=26238 comm="syz.6.7742" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 708.439952][ T29] audit: type=1400 audit(708.342:161576): avc: denied { perfmon } for pid=26238 comm="syz.6.7742" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 708.460532][ T29] audit: type=1400 audit(708.342:161577): avc: denied { perfmon } for pid=26238 comm="syz.6.7742" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 708.481109][ T29] audit: type=1400 audit(708.342:161578): avc: denied { perfmon } for pid=26238 comm="syz.6.7742" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 708.501773][ T29] audit: type=1400 audit(708.352:161579): avc: denied { perfmon } for pid=26238 comm="syz.6.7742" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 708.522353][ T29] audit: type=1400 audit(708.352:161580): avc: denied { perfmon } for pid=26238 comm="syz.6.7742" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 708.542942][ T29] audit: type=1400 audit(708.352:161581): avc: denied { bpf } for pid=26238 comm="syz.6.7742" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 708.563174][ T29] audit: type=1400 audit(708.352:161582): avc: denied { map_create } for pid=26239 comm="syz.5.7743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 708.982800][T26254] netlink: 'syz.8.7747': attribute type 7 has an invalid length. [ 709.209927][T26260] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7748'. [ 709.336500][T26264] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7750'. [ 709.492540][T26272] can0: slcan on ttyS3. [ 709.592146][T26272] can0 (unregistered): slcan off ttyS3. [ 709.700423][T26272] netlink: 'syz.5.7754': attribute type 4 has an invalid length. [ 709.708262][T26272] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7754'. [ 710.208435][ T1783] bridge_slave_0: left allmulticast mode [ 710.214256][ T1783] bridge_slave_0: left promiscuous mode [ 710.219961][ T1783] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.383197][T26293] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.7761'. [ 710.608888][T26301] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7762'. [ 710.619642][ T1783] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.651618][ T1783] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.674145][ T1783] .` (unregistering): Released all slaves [ 710.760236][ T1783] hsr_slave_0: left promiscuous mode [ 710.776470][ T1783] hsr_slave_1: left promiscuous mode [ 710.786447][ T1783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.822751][ T1783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.921344][ T1783] team0 (unregistering): Port device team_slave_1 removed [ 710.969160][ T1783] team0 (unregistering): Port device team_slave_0 removed [ 711.322082][T26312] loop8: detected capacity change from 0 to 8192 [ 711.955083][T26329] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 712.496716][T26343] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7778'. [ 712.507228][T26343] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7778'. [ 712.970363][T26350] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7779'. [ 713.093849][T26354] netlink: 'syz.7.7781': attribute type 4 has an invalid length. [ 713.101712][T26354] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7781'. [ 713.339904][ T29] kauditd_printk_skb: 1702 callbacks suppressed [ 713.339922][ T29] audit: type=1400 audit(713.322:163285): avc: denied { perfmon } for pid=26358 comm="syz.9.7783" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 713.366938][ T29] audit: type=1400 audit(713.322:163286): avc: denied { perfmon } for pid=26358 comm="syz.9.7783" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 713.387564][ T29] audit: type=1400 audit(713.322:163287): avc: denied { perfmon } for pid=26358 comm="syz.9.7783" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 713.408398][ T29] audit: type=1400 audit(713.322:163288): avc: denied { perfmon } for pid=26358 comm="syz.9.7783" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 713.429268][ T29] audit: type=1400 audit(713.322:163289): avc: denied { bpf } for pid=26358 comm="syz.9.7783" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 713.512948][ T29] audit: type=1400 audit(713.402:163290): avc: denied { bpf } for pid=26358 comm="syz.9.7783" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 713.533372][ T29] audit: type=1400 audit(713.402:163291): avc: denied { prog_run } for pid=26358 comm="syz.9.7783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 713.552096][ T29] audit: type=1326 audit(713.432:163292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26358 comm="syz.9.7783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaab3f749 code=0x7ffc0000 [ 713.575316][ T29] audit: type=1326 audit(713.432:163293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26358 comm="syz.9.7783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaab3f749 code=0x7ffc0000 [ 713.598437][ T29] audit: type=1400 audit(713.452:163294): avc: denied { prog_load } for pid=26358 comm="syz.9.7783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 714.943172][T26392] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.7793'. [ 715.010970][T26392] net_ratelimit: 96 callbacks suppressed [ 715.010985][T26392] netlink: zone id is out of range [ 715.021920][T26392] netlink: zone id is out of range [ 715.109195][T26396] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 715.136611][T26392] netlink: zone id is out of range [ 715.141811][T26392] netlink: zone id is out of range [ 715.211976][T26392] netlink: zone id is out of range [ 715.217238][T26392] netlink: zone id is out of range [ 715.222449][T26392] netlink: zone id is out of range [ 715.227737][T26392] netlink: zone id is out of range [ 715.232890][T26392] netlink: zone id is out of range [ 715.238178][T26392] netlink: zone id is out of range [ 716.069393][T26421] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7804'. [ 716.095854][T26421] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7804'. [ 716.605425][T26431] loop8: detected capacity change from 0 to 2048 [ 717.165180][T26450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7810'. [ 717.371520][T26456] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.7813'. [ 717.400619][T26459] netlink: 'syz.5.7814': attribute type 7 has an invalid length. [ 717.779580][T26467] can0: slcan on ttyS3. [ 717.876413][T26467] can0 (unregistered): slcan off ttyS3. [ 718.030993][T26467] netlink: 'syz.5.7816': attribute type 4 has an invalid length. [ 718.038807][T26467] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7816'. [ 718.290883][T26485] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.7820'. [ 718.367425][ T29] kauditd_printk_skb: 1794 callbacks suppressed [ 718.367516][ T29] audit: type=1400 audit(718.342:165089): avc: denied { read write } for pid=16857 comm="syz-executor" name="loop8" dev="devtmpfs" ino=901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.397827][ T29] audit: type=1400 audit(718.342:165090): avc: denied { read write open } for pid=16857 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.422661][ T29] audit: type=1400 audit(718.342:165091): avc: denied { ioctl } for pid=16857 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=901 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.448031][ T29] audit: type=1400 audit(718.352:165092): avc: denied { bpf } for pid=26483 comm="syz.5.7821" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 718.468341][ T29] audit: type=1400 audit(718.352:165093): avc: denied { prog_run } for pid=26483 comm="syz.5.7821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 718.653403][ T29] audit: type=1400 audit(718.542:165094): avc: denied { map_create } for pid=26483 comm="syz.5.7821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 718.672299][ T29] audit: type=1400 audit(718.542:165095): avc: denied { map_read map_write } for pid=26483 comm="syz.5.7821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 718.691819][ T29] audit: type=1400 audit(718.542:165096): avc: denied { prog_load } for pid=26483 comm="syz.5.7821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 718.710797][ T29] audit: type=1400 audit(718.552:165097): avc: denied { prog_load } for pid=26483 comm="syz.5.7821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 718.729643][ T29] audit: type=1400 audit(718.552:165098): avc: denied { bpf } for pid=26483 comm="syz.5.7821" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 719.109851][T26498] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7824'. [ 719.144172][T26498] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7824'. [ 719.154762][T26502] netlink: 'syz.8.7826': attribute type 7 has an invalid length. [ 720.093620][T26523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7831'. [ 720.111188][T26529] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7833'. [ 720.120377][T26529] netlink: 80 bytes leftover after parsing attributes in process `syz.9.7833'. [ 720.135865][T26523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.143358][T26523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.199036][T26523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.206639][T26523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.264624][T26534] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 720.285984][T26537] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7836'. [ 720.308185][T26537] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7836'. [ 720.628196][T26552] netlink: 'syz.9.7839': attribute type 7 has an invalid length. [ 720.742837][T26555] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7840'. [ 720.877285][T26557] net_ratelimit: 146 callbacks suppressed [ 720.877303][T26557] openvswitch: netlink: Flow actions attr not present in new flow. [ 721.339803][T26569] Invalid ELF header magic: != ELF [ 721.497195][T26569] loop8: detected capacity change from 0 to 512 [ 721.571013][T26569] EXT4-fs (loop8): orphan cleanup on readonly fs [ 721.593067][T26574] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 721.601597][T26569] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.7845: bad orphan inode 13 [ 721.676193][T26569] ext4_test_bit(bit=12, block=18) = 1 [ 721.681633][T26569] is_bad_inode(inode)=0 [ 721.685848][T26569] NEXT_ORPHAN(inode)=2130706432 [ 721.690728][T26569] max_ino=32 [ 721.694012][T26569] i_nlink=1 [ 721.776237][T26569] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 721.891276][T26569] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 722.039338][T26569] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 722.114214][T26589] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 722.337246][T16857] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.081251][T26614] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 723.084680][T26599] IPVS: stopping master sync thread 26614 ... [ 723.148298][T26599] __nla_validate_parse: 4 callbacks suppressed [ 723.148318][T26599] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7853'. [ 723.213449][T26599] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7853'. [ 723.380718][ T29] kauditd_printk_skb: 1388 callbacks suppressed [ 723.380737][ T29] audit: type=1400 audit(723.362:166487): avc: denied { open } for pid=26615 comm="syz.5.7859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 723.448015][ T29] audit: type=1400 audit(723.362:166488): avc: denied { perfmon } for pid=26615 comm="syz.5.7859" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 723.468691][ T29] audit: type=1400 audit(723.362:166489): avc: denied { kernel } for pid=26615 comm="syz.5.7859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 723.487922][ T29] audit: type=1400 audit(723.372:166490): avc: denied { perfmon } for pid=26615 comm="syz.5.7859" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 723.508635][ T29] audit: type=1400 audit(723.392:166491): avc: denied { allowed } for pid=26615 comm="syz.5.7859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 723.527946][ T29] audit: type=1400 audit(723.402:166492): avc: denied { create } for pid=26615 comm="syz.5.7859" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 723.549178][ T29] audit: type=1400 audit(723.402:166493): avc: denied { map } for pid=26615 comm="syz.5.7859" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 723.573224][ T29] audit: type=1400 audit(723.402:166494): avc: denied { read write } for pid=26615 comm="syz.5.7859" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 723.597860][ T29] audit: type=1400 audit(723.402:166495): avc: denied { map } for pid=26615 comm="syz.5.7859" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 723.621845][ T29] audit: type=1400 audit(723.402:166496): avc: denied { read write } for pid=26615 comm="syz.5.7859" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 723.875645][T26626] openvswitch: netlink: Flow key attr not present in new flow. [ 724.392461][T26638] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 724.648025][T26647] can0: slcan on ttyS3. [ 724.706429][T26647] can0 (unregistered): slcan off ttyS3. [ 724.827419][T26647] netlink: 'syz.9.7869': attribute type 4 has an invalid length. [ 724.835229][T26647] netlink: 152 bytes leftover after parsing attributes in process `syz.9.7869'. [ 724.915900][T26633] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7865'. [ 725.377929][T26659] lo speed is unknown, defaulting to 1000 [ 725.384615][T26659] lo speed is unknown, defaulting to 1000 [ 725.397554][T26659] lo speed is unknown, defaulting to 1000 [ 725.411261][T26666] Invalid ELF header magic: != ELF [ 725.466566][T26659] infiniband sz1: set active [ 725.471345][T26659] infiniband sz1: added lo [ 725.479858][ T8188] lo speed is unknown, defaulting to 1000 [ 725.494760][T26659] RDS/IB: sz1: added [ 725.498979][T26659] smc: adding ib device sz1 with port count 1 [ 725.555849][T26659] smc: ib device sz1 port 1 has no pnetid [ 725.593405][ T8188] lo speed is unknown, defaulting to 1000 [ 725.599341][T26659] lo speed is unknown, defaulting to 1000 [ 725.700867][T26659] lo speed is unknown, defaulting to 1000 [ 725.740188][T26659] lo speed is unknown, defaulting to 1000 [ 725.778382][T26659] lo speed is unknown, defaulting to 1000 [ 725.817902][T26659] lo speed is unknown, defaulting to 1000 [ 725.856346][T26659] lo speed is unknown, defaulting to 1000 [ 726.034247][T26661] IPVS: Unknown mcast interface: veth0_virt_wifi [ 726.059577][T26661] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7873'. [ 726.092509][T26661] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7873'. [ 726.572656][T26683] block device autoloading is deprecated and will be removed. [ 727.115404][T26697] can0: slcan on ttyS3. [ 727.177886][T26697] can0 (unregistered): slcan off ttyS3. [ 727.327616][T26700] netlink: 'syz.9.7884': attribute type 4 has an invalid length. [ 727.335411][T26700] netlink: 152 bytes leftover after parsing attributes in process `syz.9.7884'. [ 727.658958][T26708] netlink: 'syz.7.7886': attribute type 7 has an invalid length. [ 728.032343][T26715] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 728.386748][ T29] kauditd_printk_skb: 1370 callbacks suppressed [ 728.386766][ T29] audit: type=1326 audit(728.372:167861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26716 comm="syz.9.7889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2aaab365e7 code=0x7ffc0000 [ 728.442346][T26724] lo speed is unknown, defaulting to 1000 [ 728.485847][ T29] audit: type=1326 audit(728.412:167862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26716 comm="syz.9.7889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aaaadb829 code=0x7ffc0000 [ 728.508990][ T29] audit: type=1326 audit(728.412:167863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26716 comm="syz.9.7889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2aaab365e7 code=0x7ffc0000 [ 728.532096][ T29] audit: type=1326 audit(728.412:167864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26716 comm="syz.9.7889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aaaadb829 code=0x7ffc0000 [ 728.555247][ T29] audit: type=1326 audit(728.412:167865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26716 comm="syz.9.7889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaab3f749 code=0x7ffc0000 [ 728.578364][ T29] audit: type=1326 audit(728.422:167866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26716 comm="syz.9.7889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2aaab365e7 code=0x7ffc0000 [ 728.601366][ T29] audit: type=1326 audit(728.422:167867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26716 comm="syz.9.7889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aaaadb829 code=0x7ffc0000 [ 728.624462][ T29] audit: type=1326 audit(728.422:167868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26716 comm="syz.9.7889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaab3f749 code=0x7ffc0000 [ 728.647565][ T29] audit: type=1326 audit(728.442:167869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26716 comm="syz.9.7889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2aaab365e7 code=0x7ffc0000 [ 728.670704][ T29] audit: type=1326 audit(728.442:167870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26716 comm="syz.9.7889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aaaadb829 code=0x7ffc0000 [ 728.912067][T26737] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 728.933367][T26729] IPVS: stopping master sync thread 26737 ... [ 728.987321][T26724] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7890'. [ 729.058088][T26724] netlink: 52 bytes leftover after parsing attributes in process `syz.8.7890'. [ 729.243103][T26747] netlink: 'syz.9.7898': attribute type 7 has an invalid length. [ 729.429090][T26750] loop8: detected capacity change from 0 to 512 [ 729.476645][T26750] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.7899: EA inode hash validation failed [ 729.578497][T26750] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.7899: corrupted inode contents [ 729.595323][T26750] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #15: comm syz.8.7899: mark_inode_dirty error [ 729.631189][T26750] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.7899: corrupted inode contents [ 729.643727][T26750] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3000: inode #15: comm syz.8.7899: mark_inode_dirty error [ 729.697481][T26750] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3003: inode #15: comm syz.8.7899: mark inode dirty (error -117) [ 729.764512][T26750] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 729.794065][T26750] EXT4-fs (loop8): 1 orphan inode deleted [ 729.854930][T26750] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.892727][T26763] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.7904'. [ 729.909127][T26763] netlink: zone id is out of range [ 729.914308][T26763] netlink: zone id is out of range [ 729.939858][T26763] netlink: zone id is out of range [ 729.945179][T26763] netlink: zone id is out of range [ 729.962637][T16857] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.994023][T26763] netlink: zone id is out of range [ 729.999266][T26763] netlink: zone id is out of range [ 730.004417][T26763] netlink: zone id is out of range [ 730.009597][T26763] netlink: zone id is out of range [ 730.014740][T26763] netlink: zone id is out of range [ 730.019962][T26763] netlink: zone id is out of range [ 730.062878][T26767] can0: slcan on ttyS3. [ 730.150845][T26767] can0 (unregistered): slcan off ttyS3. [ 730.338131][T18697] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.431483][T18697] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.521838][T18697] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.542038][T26767] netlink: 'syz.7.7903': attribute type 4 has an invalid length. [ 730.549988][T26767] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7903'. [ 730.610687][T18697] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.781654][T18697] bridge_slave_0: left allmulticast mode [ 730.787506][T18697] bridge_slave_0: left promiscuous mode [ 730.793244][T18697] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.061936][T18697] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.099995][T18697] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.124078][T18697] .` (unregistering): Released all slaves [ 731.149084][T18697] bond0 (unregistering): Released all slaves [ 731.168603][T18697] bond1 (unregistering): Released all slaves [ 731.307867][T26788] lo speed is unknown, defaulting to 1000 [ 731.356629][T18697] hsr_slave_0: left promiscuous mode [ 731.395845][T18697] hsr_slave_1: left promiscuous mode [ 731.408322][T18697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.415815][T18697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.446331][T18697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.453919][T18697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.495025][T18697] veth1_macvtap: left promiscuous mode [ 731.509850][T18697] veth0_macvtap: left promiscuous mode [ 731.581661][T26801] netlink: 'syz.9.7912': attribute type 7 has an invalid length. [ 731.666149][T18697] team0 (unregistering): Port device team_slave_1 removed [ 731.691837][T18697] team0 (unregistering): Port device team_slave_0 removed [ 731.857001][T26772] lo speed is unknown, defaulting to 1000 [ 731.856989][T26808] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 731.874977][T26791] IPVS: stopping master sync thread 26808 ... [ 732.018422][T26788] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7909'. [ 732.159044][T26788] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7909'. [ 732.300035][T26772] chnl_net:caif_netlink_parms(): no params data found [ 732.469156][T26772] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.476454][T26772] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.485923][T26772] bridge_slave_0: entered allmulticast mode [ 732.492659][T26772] bridge_slave_0: entered promiscuous mode [ 732.502698][T26772] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.510023][T26772] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.521462][T26772] bridge_slave_1: entered allmulticast mode [ 732.528286][T26772] bridge_slave_1: entered promiscuous mode [ 732.591591][T26772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.632978][T26772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.635515][T26832] Invalid ELF header magic: != ELF [ 732.718560][T26772] team0: Port device team_slave_0 added [ 732.776704][T26772] team0: Port device team_slave_1 added [ 732.933117][T26772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.940238][T26772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.966627][T26772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.064494][T26772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.071540][T26772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.097643][T26772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.267255][T26772] hsr_slave_0: entered promiscuous mode [ 733.278961][T26772] hsr_slave_1: entered promiscuous mode [ 733.286010][T26772] debugfs: 'hsr0' already exists in 'hsr' [ 733.291780][T26772] Cannot create hsr debugfs directory [ 733.397340][ T29] kauditd_printk_skb: 2042 callbacks suppressed [ 733.397363][ T29] audit: type=1400 audit(733.382:169901): avc: denied { create } for pid=26848 comm="syz.9.7923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 733.546042][ T29] audit: type=1400 audit(733.382:169902): avc: denied { setopt } for pid=26848 comm="syz.9.7923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 733.565429][ T29] audit: type=1400 audit(733.402:169903): avc: denied { ioctl } for pid=26848 comm="syz.9.7923" path="socket:[101985]" dev="sockfs" ino=101985 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 733.590233][ T29] audit: type=1400 audit(733.402:169904): avc: denied { write } for pid=26848 comm="syz.9.7923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 733.609569][ T29] audit: type=1326 audit(733.402:169905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26847 comm="syz.5.7922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3f78ff749 code=0x7ffc0000 [ 733.632718][ T29] audit: type=1400 audit(733.402:169906): avc: denied { prog_load } for pid=26847 comm="syz.5.7922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 733.651582][ T29] audit: type=1400 audit(733.402:169907): avc: denied { bpf } for pid=26847 comm="syz.5.7922" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 733.671794][ T29] audit: type=1400 audit(733.402:169908): avc: denied { perfmon } for pid=26847 comm="syz.5.7922" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 733.692428][ T29] audit: type=1400 audit(733.412:169909): avc: denied { perfmon } for pid=26847 comm="syz.5.7922" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 733.713007][ T29] audit: type=1400 audit(733.412:169910): avc: denied { perfmon } for pid=26847 comm="syz.5.7922" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 734.093145][T26772] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 734.157566][T26772] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 734.198150][T26772] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 734.258858][T26772] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 734.327649][T26871] lo speed is unknown, defaulting to 1000 [ 734.894879][T26772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.987229][T26890] Invalid ELF header magic: != ELF [ 734.999897][T26772] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.017046][T26871] IPVS: Unknown mcast interface: veth0_virt_wifi [ 735.051270][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.058422][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.071056][T26871] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7927'. [ 735.136692][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.143816][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.176641][T26871] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7927'. [ 735.743505][T26912] can0: slcan on ttyS3. [ 735.856524][T26912] can0 (unregistered): slcan off ttyS3. [ 735.953296][T26912] netlink: 'syz.7.7933': attribute type 4 has an invalid length. [ 735.961176][T26912] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7933'. [ 736.052902][T26772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.839386][T26951] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7939'. [ 736.862931][T26951] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7939'. [ 736.942368][T26955] Invalid ELF header magic: != ELF [ 737.034642][T26958] Invalid ELF header magic: != ELF [ 737.328499][T26772] veth0_vlan: entered promiscuous mode [ 737.409385][T26772] veth1_vlan: entered promiscuous mode [ 737.627105][T26987] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.7947'. [ 737.664594][T26772] veth0_macvtap: entered promiscuous mode [ 737.667125][T26987] net_ratelimit: 42 callbacks suppressed [ 737.667168][T26987] netlink: zone id is out of range [ 737.681288][T26987] netlink: zone id is out of range [ 737.741868][T26987] netlink: zone id is out of range [ 737.745487][T26772] veth1_macvtap: entered promiscuous mode [ 737.747085][T26987] netlink: zone id is out of range [ 737.772582][T26987] netlink: zone id is out of range [ 737.777962][T26987] netlink: zone id is out of range [ 737.783133][T26987] netlink: zone id is out of range [ 737.788323][T26987] netlink: zone id is out of range [ 737.793478][T26987] netlink: zone id is out of range [ 737.798722][T26987] netlink: zone id is out of range [ 737.908191][T26772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.968072][T26772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.028785][ T31] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.059297][ T31] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.105860][ T31] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.172193][ T31] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.951391][ T29] kauditd_printk_skb: 3072 callbacks suppressed [ 738.951460][ T29] audit: type=1400 audit(738.932:172983): avc: denied { prog_load } for pid=26996 comm="syz.6.7950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 738.976781][ T29] audit: type=1400 audit(738.932:172984): avc: denied { bpf } for pid=26996 comm="syz.6.7950" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 738.997179][ T29] audit: type=1400 audit(738.932:172985): avc: denied { perfmon } for pid=26996 comm="syz.6.7950" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 739.183749][T26995] audit: audit_backlog=65 > audit_backlog_limit=64 [ 739.190387][T26995] audit: audit_lost=1536 audit_rate_limit=0 audit_backlog_limit=64 [ 739.198324][T26995] audit: backlog limit exceeded [ 739.201510][ T29] audit: type=1400 audit(739.142:172986): avc: denied { search } for pid=26995 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.225054][ T29] audit: type=1400 audit(739.142:172987): avc: denied { search } for pid=26995 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.247535][ T29] audit: type=1400 audit(739.142:172988): avc: denied { search } for pid=26995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.270367][ T29] audit: type=1400 audit(739.142:172989): avc: denied { read open } for pid=26995 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.286152][T17789] IPVS: starting estimator thread 0... [ 739.406234][T27005] IPVS: using max 1680 ests per chain, 84000 per kthread [ 739.509055][T27010] netlink: 'syz.7.7952': attribute type 4 has an invalid length. [ 739.516949][T27010] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7952'. [ 739.726321][T27021] can0: slcan on ttyS3. [ 739.824704][T27021] can0 (unregistered): slcan off ttyS3. [ 740.022482][T27021] netlink: 'syz.8.7905': attribute type 4 has an invalid length. [ 740.030398][T27021] netlink: 152 bytes leftover after parsing attributes in process `syz.8.7905'. [ 740.094522][T27021] .`: renamed from bond0 (while UP) [ 740.498897][T27045] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.7959'. [ 740.823587][T27055] Invalid ELF header magic: != ELF [ 740.933537][T27059] lo speed is unknown, defaulting to 1000 [ 742.172245][T27094] lo speed is unknown, defaulting to 1000 [ 742.204341][T27092] loop8: detected capacity change from 0 to 256 [ 742.249075][T27092] FAT-fs (loop8): Directory bread(block 64) failed [ 742.268018][T27092] FAT-fs (loop8): Directory bread(block 65) failed [ 742.294057][T27092] FAT-fs (loop8): Directory bread(block 66) failed [ 742.319790][T27092] FAT-fs (loop8): Directory bread(block 67) failed [ 742.335917][T27092] FAT-fs (loop8): Directory bread(block 68) failed [ 742.348111][T27092] FAT-fs (loop8): Directory bread(block 69) failed [ 742.365709][T27092] FAT-fs (loop8): Directory bread(block 70) failed [ 742.387347][T27092] FAT-fs (loop8): Directory bread(block 71) failed [ 742.405542][T27092] FAT-fs (loop8): Directory bread(block 72) failed [ 742.422435][T27092] FAT-fs (loop8): Directory bread(block 73) failed [ 743.963479][ T29] kauditd_printk_skb: 2674 callbacks suppressed [ 743.963498][ T29] audit: type=1400 audit(743.922:175436): avc: denied { map_create } for pid=27141 comm="syz.9.7994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 743.988802][ T29] audit: type=1400 audit(743.942:175437): avc: denied { read } for pid=27143 comm="syz.8.7995" dev="nsfs" ino=4026533145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 744.009721][ T29] audit: type=1400 audit(743.942:175438): avc: denied { read open } for pid=27143 comm="syz.8.7995" path="net:[4026533145]" dev="nsfs" ino=4026533145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 744.033080][ T29] audit: type=1400 audit(743.942:175439): avc: denied { prog_load } for pid=27141 comm="syz.9.7994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 744.052099][ T29] audit: type=1400 audit(743.942:175440): avc: denied { bpf } for pid=27141 comm="syz.9.7994" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 744.072379][ T29] audit: type=1400 audit(743.942:175441): avc: denied { create } for pid=27143 comm="syz.8.7995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 744.092023][ T29] audit: type=1400 audit(743.942:175442): avc: denied { perfmon } for pid=27141 comm="syz.9.7994" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 744.112637][ T29] audit: type=1400 audit(743.942:175443): avc: denied { perfmon } for pid=27141 comm="syz.9.7994" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 744.133547][ T29] audit: type=1400 audit(743.942:175444): avc: denied { perfmon } for pid=27141 comm="syz.9.7994" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 744.152298][T27144] loop8: detected capacity change from 0 to 256 [ 744.154595][ T29] audit: type=1400 audit(743.942:175445): avc: denied { perfmon } for pid=27141 comm="syz.9.7994" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 744.265365][T27144] FAT-fs (loop8): Directory bread(block 64) failed [ 744.309341][T27144] FAT-fs (loop8): Directory bread(block 65) failed [ 744.345813][T27144] FAT-fs (loop8): Directory bread(block 66) failed [ 744.352508][T27144] FAT-fs (loop8): Directory bread(block 67) failed [ 744.386685][T27144] FAT-fs (loop8): Directory bread(block 68) failed [ 744.401601][T27144] FAT-fs (loop8): Directory bread(block 69) failed [ 744.445913][T27144] FAT-fs (loop8): Directory bread(block 70) failed [ 744.452573][T27144] FAT-fs (loop8): Directory bread(block 71) failed [ 744.496938][T27144] FAT-fs (loop8): Directory bread(block 72) failed [ 744.503522][T27144] FAT-fs (loop8): Directory bread(block 73) failed [ 744.768657][T27162] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8002'. [ 744.796720][T27162] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8002'. [ 745.475123][T27177] loop8: detected capacity change from 0 to 256 [ 745.788543][T27184] netlink: 'syz.6.8009': attribute type 4 has an invalid length. [ 745.796388][T27184] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8009'. [ 746.159243][T27191] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8012'. [ 746.265274][T27198] can0: slcan on ttyS3. [ 746.335975][T27198] can0 (unregistered): slcan off ttyS3. [ 746.487654][T27199] netlink: 'syz.8.8013': attribute type 4 has an invalid length. [ 746.495477][T27199] netlink: 152 bytes leftover after parsing attributes in process `syz.8.8013'. [ 746.881717][T27206] can0: slcan on ttyS3. [ 746.898319][T27208] Invalid ELF header magic: != ELF [ 746.944329][T27208] loop8: detected capacity change from 0 to 512 [ 746.986015][T27206] can0 (unregistered): slcan off ttyS3. [ 747.012616][T27208] EXT4-fs (loop8): orphan cleanup on readonly fs [ 747.036464][T27208] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.8018: bad orphan inode 13 [ 747.057267][T27208] ext4_test_bit(bit=12, block=18) = 1 [ 747.062693][T27208] is_bad_inode(inode)=0 [ 747.066973][T27208] NEXT_ORPHAN(inode)=2130706432 [ 747.071869][T27208] max_ino=32 [ 747.075102][T27208] i_nlink=1 [ 747.121111][T27208] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 747.133881][T27209] netlink: 'syz.6.8016': attribute type 4 has an invalid length. [ 747.141828][T27209] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8016'. [ 747.209971][T27212] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8020'. [ 747.232757][T27212] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8020'. [ 747.243110][T26772] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.623135][T27220] bridge1: entered promiscuous mode [ 747.628567][T27220] bridge1: entered allmulticast mode [ 747.674135][T27220] team0: Port device bridge1 added [ 747.789716][T27220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.825979][T27220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.584451][T17809] IPVS: starting estimator thread 0... [ 748.726396][T27233] IPVS: using max 2112 ests per chain, 105600 per kthread [ 748.969688][ T29] kauditd_printk_skb: 1425 callbacks suppressed [ 748.969709][ T29] audit: type=1400 audit(748.922:176868): avc: denied { map_read map_write } for pid=27237 comm="syz.8.8029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 748.995776][ T29] audit: type=1400 audit(748.922:176869): avc: denied { prog_load } for pid=27237 comm="syz.8.8029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 749.014543][ T29] audit: type=1400 audit(748.932:176870): avc: denied { bpf } for pid=27237 comm="syz.8.8029" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 749.034803][ T29] audit: type=1400 audit(748.932:176871): avc: denied { perfmon } for pid=27237 comm="syz.8.8029" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 749.055428][ T29] audit: type=1400 audit(748.932:176872): avc: denied { perfmon } for pid=27237 comm="syz.8.8029" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 749.076216][ T29] audit: type=1400 audit(748.932:176873): avc: denied { perfmon } for pid=27237 comm="syz.8.8029" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 749.096807][ T29] audit: type=1400 audit(748.942:176874): avc: denied { perfmon } for pid=27237 comm="syz.8.8029" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 749.117376][ T29] audit: type=1400 audit(748.942:176875): avc: denied { perfmon } for pid=27237 comm="syz.8.8029" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 749.137943][ T29] audit: type=1400 audit(748.942:176876): avc: denied { bpf } for pid=27237 comm="syz.8.8029" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 749.158223][ T29] audit: type=1400 audit(748.952:176877): avc: denied { create } for pid=27234 comm="syz.7.8027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 749.369766][T27246] Invalid ELF header magic: != ELF [ 749.511051][T27251] can0: slcan on ttyS3. [ 749.592422][T27253] lo speed is unknown, defaulting to 1000 [ 749.638751][T27254] can0 (unregistered): slcan off ttyS3. [ 749.825044][T27251] netlink: 'syz.9.8033': attribute type 4 has an invalid length. [ 749.832939][T27251] netlink: 152 bytes leftover after parsing attributes in process `syz.9.8033'. [ 751.122370][T27288] loop8: detected capacity change from 0 to 256 [ 751.190690][T27288] FAT-fs (loop8): Directory bread(block 64) failed [ 751.220632][T27288] FAT-fs (loop8): Directory bread(block 65) failed [ 751.241110][T27288] FAT-fs (loop8): Directory bread(block 66) failed [ 751.275356][T27288] FAT-fs (loop8): Directory bread(block 67) failed [ 751.287622][T27288] FAT-fs (loop8): Directory bread(block 68) failed [ 751.311207][T27288] FAT-fs (loop8): Directory bread(block 69) failed [ 751.341016][T27288] FAT-fs (loop8): Directory bread(block 70) failed [ 751.371431][T27288] FAT-fs (loop8): Directory bread(block 71) failed [ 751.389522][T27288] FAT-fs (loop8): Directory bread(block 72) failed [ 751.413624][T27288] FAT-fs (loop8): Directory bread(block 73) failed [ 751.836063][T27304] Invalid ELF header magic: != ELF [ 751.878527][T27308] Invalid ELF header magic: != ELF [ 751.964746][T27304] loop8: detected capacity change from 0 to 512 [ 752.003748][T27304] EXT4-fs (loop8): orphan cleanup on readonly fs [ 752.046702][T27304] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.8055: bad orphan inode 13 [ 752.112955][T27304] ext4_test_bit(bit=12, block=18) = 1 [ 752.118412][T27304] is_bad_inode(inode)=0 [ 752.122649][T27304] NEXT_ORPHAN(inode)=2130706432 [ 752.127529][T27304] max_ino=32 [ 752.130757][T27304] i_nlink=1 [ 752.163242][T27304] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 752.239152][T27304] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 752.263408][T27304] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 752.304561][ T8118] IPVS: starting estimator thread 0... [ 752.317344][T27322] net_ratelimit: 94 callbacks suppressed [ 752.317363][T27322] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 752.336967][T26772] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.396462][T27327] IPVS: using max 2160 ests per chain, 108000 per kthread [ 753.359688][T27346] Invalid ELF header magic: != ELF [ 753.611142][T27356] loop8: detected capacity change from 0 to 256 [ 753.982953][ T29] kauditd_printk_skb: 2209 callbacks suppressed [ 753.982972][ T29] audit: type=1400 audit(753.962:179087): avc: denied { create } for pid=27364 comm="syz.6.8077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 754.088481][ T29] audit: type=1400 audit(753.992:179088): avc: denied { setopt } for pid=27364 comm="syz.6.8077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 754.107651][ T29] audit: type=1400 audit(753.992:179089): avc: denied { connect } for pid=27364 comm="syz.6.8077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 754.126993][ T29] audit: type=1400 audit(754.002:179090): avc: denied { connect } for pid=27364 comm="syz.6.8077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 754.146164][ T29] audit: type=1400 audit(754.002:179091): avc: denied { create } for pid=27364 comm="syz.6.8077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 754.165554][ T29] audit: type=1400 audit(754.002:179092): avc: denied { setopt } for pid=27364 comm="syz.6.8077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 754.184914][ T29] audit: type=1400 audit(754.002:179093): avc: denied { create } for pid=27364 comm="syz.6.8077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 754.204323][ T29] audit: type=1400 audit(754.002:179094): avc: denied { setopt } for pid=27364 comm="syz.6.8077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 754.223691][ T29] audit: type=1400 audit(754.002:179095): avc: denied { ioctl } for pid=27364 comm="syz.6.8077" path="socket:[104693]" dev="sockfs" ino=104693 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 754.248447][ T29] audit: type=1400 audit(754.012:179096): avc: denied { write } for pid=27364 comm="syz.6.8077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 754.558415][T27373] can0: slcan on ttyS3. [ 754.626233][T27373] can0 (unregistered): slcan off ttyS3. [ 754.760986][T27373] netlink: 'syz.8.8081': attribute type 4 has an invalid length. [ 754.768894][T27373] netlink: 152 bytes leftover after parsing attributes in process `syz.8.8081'. [ 754.892671][T27379] lo speed is unknown, defaulting to 1000 [ 755.344092][T27390] loop8: detected capacity change from 0 to 256 [ 755.447018][T27390] FAT-fs (loop8): Directory bread(block 64) failed [ 755.462835][T27390] FAT-fs (loop8): Directory bread(block 65) failed [ 755.482410][T27390] FAT-fs (loop8): Directory bread(block 66) failed [ 755.529765][T27390] FAT-fs (loop8): Directory bread(block 67) failed [ 755.548159][T27390] FAT-fs (loop8): Directory bread(block 68) failed [ 755.568169][T27390] FAT-fs (loop8): Directory bread(block 69) failed [ 755.590271][T27390] FAT-fs (loop8): Directory bread(block 70) failed [ 755.614835][T27390] FAT-fs (loop8): Directory bread(block 71) failed [ 755.651415][T27390] FAT-fs (loop8): Directory bread(block 72) failed [ 755.669292][T27390] FAT-fs (loop8): Directory bread(block 73) failed [ 755.711660][T27395] bridge1: entered promiscuous mode [ 755.717236][T27395] bridge1: entered allmulticast mode [ 755.755967][T27395] team0: Port device bridge1 added [ 756.065247][T27398] lo speed is unknown, defaulting to 1000 [ 756.313119][T27410] loop8: detected capacity change from 0 to 128 [ 756.359086][T27410] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 756.597080][T26772] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 756.849103][T27426] can0: slcan on ttyS3. [ 756.917540][T27426] can0 (unregistered): slcan off ttyS3. [ 757.098304][T27426] netlink: 'syz.5.8099': attribute type 4 has an invalid length. [ 757.106146][T27426] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8099'. [ 757.338959][T27440] can0: slcan on ttyS3. [ 757.386745][T27440] can0 (unregistered): slcan off ttyS3. [ 757.518140][T27448] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8103'. [ 757.606558][T27440] netlink: 'syz.6.8104': attribute type 4 has an invalid length. [ 757.614336][T27440] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8104'. [ 757.628709][T27446] loop8: detected capacity change from 0 to 256 [ 758.176514][T27462] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8111'. [ 758.233082][T27462] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8111'. [ 758.366703][T27460] lo speed is unknown, defaulting to 1000 [ 758.854890][T27480] Invalid ELF header magic: != ELF [ 759.001210][ T29] kauditd_printk_skb: 2105 callbacks suppressed [ 759.001272][ T29] audit: type=1400 audit(758.982:181202): avc: denied { write } for pid=27481 comm="syz.9.8117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 759.026874][ T29] audit: type=1400 audit(758.982:181203): avc: denied { write } for pid=27481 comm="syz.9.8117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 759.046428][ T29] audit: type=1400 audit(758.982:181204): avc: denied { write } for pid=27481 comm="syz.9.8117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 759.065664][ T29] audit: type=1400 audit(758.982:181205): avc: denied { write } for pid=27481 comm="syz.9.8117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 759.084917][ T29] audit: type=1400 audit(758.982:181206): avc: denied { write } for pid=27481 comm="syz.9.8117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 759.209520][T27483] audit: audit_backlog=65 > audit_backlog_limit=64 [ 759.216218][T27483] audit: audit_lost=1614 audit_rate_limit=0 audit_backlog_limit=64 [ 759.224261][T27483] audit: backlog limit exceeded [ 759.235984][ T29] audit: type=1400 audit(759.052:181207): avc: denied { map_create } for pid=27485 comm="syz.8.8119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 759.255214][ T29] audit: type=1400 audit(759.052:181208): avc: denied { bpf } for pid=27485 comm="syz.8.8119" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 759.440320][T27494] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 759.453761][T27463] IPVS: stopping master sync thread 27494 ... [ 759.522166][T27463] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8110'. [ 759.664613][T27460] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8110'. [ 759.808610][T27500] can0: slcan on ttyS3. [ 759.879439][T27500] can0 (unregistered): slcan off ttyS3. [ 759.967807][T27500] netlink: 'syz.7.8123': attribute type 4 has an invalid length. [ 759.975700][T27500] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8123'. [ 760.564942][T27516] loop8: detected capacity change from 0 to 256 [ 760.709879][T27516] FAT-fs (loop8): Directory bread(block 64) failed [ 760.736532][T27516] FAT-fs (loop8): Directory bread(block 65) failed [ 760.755868][T27516] FAT-fs (loop8): Directory bread(block 66) failed [ 760.781881][T27516] FAT-fs (loop8): Directory bread(block 67) failed [ 760.803194][T27516] FAT-fs (loop8): Directory bread(block 68) failed [ 760.824848][T27516] FAT-fs (loop8): Directory bread(block 69) failed [ 760.842826][T27516] FAT-fs (loop8): Directory bread(block 70) failed [ 760.856193][T27516] FAT-fs (loop8): Directory bread(block 71) failed [ 760.862973][T27516] FAT-fs (loop8): Directory bread(block 72) failed [ 760.869663][T27516] FAT-fs (loop8): Directory bread(block 73) failed [ 761.391095][T27542] can0: slcan on ttyS3. [ 761.436444][T27542] can0 (unregistered): slcan off ttyS3. [ 761.620777][T27542] netlink: 'syz.7.8141': attribute type 4 has an invalid length. [ 761.628769][T27542] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8141'. [ 761.865307][T27557] can0: slcan on ttyS3. [ 761.977394][T27557] can0 (unregistered): slcan off ttyS3. [ 762.063186][T27557] netlink: 'syz.6.8145': attribute type 4 has an invalid length. [ 762.071131][T27557] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8145'. [ 762.470627][T27571] bridge1: entered promiscuous mode [ 762.475949][T27571] bridge1: entered allmulticast mode [ 762.524030][T27571] team0: Port device bridge1 added [ 763.999954][T27616] can0: slcan on ttyS3. [ 764.016683][ T29] kauditd_printk_skb: 4832 callbacks suppressed [ 764.016736][ T29] audit: type=1400 audit(764.002:184511): avc: denied { write } for pid=27599 comm="syz.6.8157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 764.106826][T27616] can0 (unregistered): slcan off ttyS3. [ 764.131854][ T29] audit: type=1400 audit(764.022:184512): avc: denied { write } for pid=27599 comm="syz.6.8157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 764.151317][ T29] audit: type=1400 audit(764.032:184513): avc: denied { write } for pid=27599 comm="syz.6.8157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 764.170498][ T29] audit: type=1400 audit(764.032:184514): avc: denied { write } for pid=27599 comm="syz.6.8157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 764.189829][ T29] audit: type=1400 audit(764.042:184515): avc: denied { write } for pid=27599 comm="syz.6.8157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 764.209066][ T29] audit: type=1400 audit(764.062:184516): avc: denied { write } for pid=27599 comm="syz.6.8157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 764.228326][ T29] audit: type=1400 audit(764.062:184517): avc: denied { write } for pid=27599 comm="syz.6.8157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 764.247651][ T29] audit: type=1400 audit(764.062:184518): avc: denied { write } for pid=27599 comm="syz.6.8157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 764.266865][ T29] audit: type=1400 audit(764.062:184519): avc: denied { write } for pid=27599 comm="syz.6.8157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 764.286188][ T29] audit: type=1400 audit(764.062:184520): avc: denied { write } for pid=27599 comm="syz.6.8157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 764.364103][T27616] netlink: 'syz.5.8161': attribute type 4 has an invalid length. [ 764.372130][T27616] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8161'. [ 764.454716][T27621] loop8: detected capacity change from 0 to 256 [ 764.596639][T27621] FAT-fs (loop8): Directory bread(block 64) failed [ 764.616163][T27621] FAT-fs (loop8): Directory bread(block 65) failed [ 764.622791][T27621] FAT-fs (loop8): Directory bread(block 66) failed [ 764.668294][T27621] FAT-fs (loop8): Directory bread(block 67) failed [ 764.674905][T27621] FAT-fs (loop8): Directory bread(block 68) failed [ 764.726117][T27621] FAT-fs (loop8): Directory bread(block 69) failed [ 764.743090][T27621] FAT-fs (loop8): Directory bread(block 70) failed [ 764.762931][T27621] FAT-fs (loop8): Directory bread(block 71) failed [ 764.781170][T27621] FAT-fs (loop8): Directory bread(block 72) failed [ 764.796224][T27621] FAT-fs (loop8): Directory bread(block 73) failed [ 764.923288][T27621] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 764.932047][T27621] FAT-fs (loop8): Filesystem has been set read-only [ 764.955676][T27621] bio_check_eod: 80 callbacks suppressed [ 764.955697][T27621] syz.8.8163: attempt to access beyond end of device [ 764.955697][T27621] loop8: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 764.976193][T27621] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 764.988032][T27621] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 765.007205][T27621] syz.8.8163: attempt to access beyond end of device [ 765.007205][T27621] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 765.021340][T27621] syz.8.8163: attempt to access beyond end of device [ 765.021340][T27621] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 765.049090][T27636] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 765.337599][T27646] Invalid ELF header magic: != ELF [ 765.505230][T27649] loop8: detected capacity change from 0 to 256 [ 765.575116][T27649] FAT-fs (loop8): Directory bread(block 64) failed [ 765.593323][T27653] bridge2: entered promiscuous mode [ 765.598730][T27653] bridge2: entered allmulticast mode [ 765.599099][T27649] FAT-fs (loop8): Directory bread(block 65) failed [ 765.630221][T27653] team0: Port device bridge2 added [ 765.640679][T27649] FAT-fs (loop8): Directory bread(block 66) failed [ 765.665867][T27649] FAT-fs (loop8): Directory bread(block 67) failed [ 765.692661][T27649] FAT-fs (loop8): Directory bread(block 68) failed [ 765.712380][T27649] FAT-fs (loop8): Directory bread(block 69) failed [ 765.748097][T27649] FAT-fs (loop8): Directory bread(block 70) failed [ 765.765783][T27649] FAT-fs (loop8): Directory bread(block 71) failed [ 765.772383][T27649] FAT-fs (loop8): Directory bread(block 72) failed [ 765.816963][T27649] FAT-fs (loop8): Directory bread(block 73) failed [ 765.916990][T27649] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 765.925645][T27649] FAT-fs (loop8): Filesystem has been set read-only [ 765.956089][T27649] syz.8.8172: attempt to access beyond end of device [ 765.956089][T27649] loop8: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 766.006905][T27649] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 766.055781][T27649] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 766.064710][T27649] syz.8.8172: attempt to access beyond end of device [ 766.064710][T27649] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 766.136234][T27649] syz.8.8172: attempt to access beyond end of device [ 766.136234][T27649] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 766.177706][T27661] can0: slcan on ttyS3. [ 766.286908][T27661] can0 (unregistered): slcan off ttyS3. [ 766.352537][T27661] netlink: 'syz.6.8177': attribute type 4 has an invalid length. [ 766.360358][T27661] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8177'. [ 767.241347][T27692] loop8: detected capacity change from 0 to 128 [ 767.255195][T27691] can0: slcan on ttyS3. [ 767.306226][T27691] can0 (unregistered): slcan off ttyS3. [ 767.335771][T27687] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 767.454388][T27693] netlink: 'syz.6.8188': attribute type 4 has an invalid length. [ 767.462272][T27693] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8188'. [ 768.073266][T27692] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 768.461124][T26772] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 768.946769][T27725] syz.9.8196: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 768.961421][T27725] CPU: 1 UID: 0 PID: 27725 Comm: syz.9.8196 Not tainted syzkaller #0 PREEMPT(voluntary) [ 768.961517][T27725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 768.961536][T27725] Call Trace: [ 768.961546][T27725] [ 768.961558][T27725] __dump_stack+0x1d/0x30 [ 768.961635][T27725] dump_stack_lvl+0x95/0xd0 [ 768.961671][T27725] dump_stack+0x15/0x1b [ 768.961699][T27725] warn_alloc+0x12b/0x1a0 [ 768.961732][T27725] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 768.961771][T27725] __vmalloc_node_range_noprof+0xa0/0x1310 [ 768.961837][T27725] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 768.961920][T27725] ? perf_cgroup_switch+0x10c/0x480 [ 768.961945][T27725] ? xfd_validate_state+0x45/0xf0 [ 768.961973][T27725] ? save_fpregs_to_fpstate+0x100/0x160 [ 768.962145][T27725] ? _raw_spin_unlock+0x26/0x50 [ 768.962174][T27725] ? finish_task_switch+0x7a/0x2a0 [ 768.962211][T27725] ? should_fail_ex+0x30/0x280 [ 768.962239][T27725] ? should_failslab+0x8c/0xb0 [ 768.962331][T27725] vmalloc_user_noprof+0x7d/0xb0 [ 768.962364][T27725] ? xskq_create+0x80/0xe0 [ 768.962388][T27725] xskq_create+0x80/0xe0 [ 768.962414][T27725] xsk_init_queue+0x95/0xf0 [ 768.962533][T27725] xsk_setsockopt+0x3f5/0x640 [ 768.962567][T27725] ? __pfx_xsk_setsockopt+0x10/0x10 [ 768.962606][T27725] __sys_setsockopt+0x184/0x200 [ 768.962704][T27725] __x64_sys_setsockopt+0x64/0x80 [ 768.962740][T27725] x64_sys_call+0x21d5/0x3000 [ 768.962774][T27725] do_syscall_64+0xca/0x2b0 [ 768.962874][T27725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.962904][T27725] RIP: 0033:0x7f2aaab3f749 [ 768.962925][T27725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.962949][T27725] RSP: 002b:00007f2aa959f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 768.963010][T27725] RAX: ffffffffffffffda RBX: 00007f2aaad95fa0 RCX: 00007f2aaab3f749 [ 768.963024][T27725] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 768.963037][T27725] RBP: 00007f2aaabc3f91 R08: 0000000000000004 R09: 0000000000000000 [ 768.963054][T27725] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.963069][T27725] R13: 00007f2aaad96038 R14: 00007f2aaad95fa0 R15: 00007ffd4e02ca28 [ 768.963147][T27725] [ 768.963169][T27725] Mem-Info: [ 769.081555][ T29] kauditd_printk_skb: 1631 callbacks suppressed [ 769.081607][ T29] audit: type=1400 audit(769.022:185945): avc: denied { read write } for pid=26772 comm="syz-executor" name="loop8" dev="devtmpfs" ino=901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 769.082549][T27725] active_anon:65979 inactive_anon:9 isolated_anon:0 [ 769.082549][T27725] active_file:28040 inactive_file:2959 isolated_file:0 [ 769.082549][T27725] unevictable:0 dirty:375 writeback:0 [ 769.082549][T27725] slab_reclaimable:3660 slab_unreclaimable:19488 [ 769.082549][T27725] mapped:34498 shmem:54941 pagetables:1789 [ 769.082549][T27725] sec_pagetables:0 bounce:0 [ 769.082549][T27725] kernel_misc_reclaimable:0 [ 769.082549][T27725] free:1733054 free_pcp:7943 free_cma:0 [ 769.087939][ T29] audit: type=1400 audit(769.022:185946): avc: denied { read write open } for pid=26772 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 769.088014][ T29] audit: type=1400 audit(769.032:185947): avc: denied { ioctl } for pid=26772 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=901 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 769.092868][T27725] Node 0 active_anon:263916kB inactive_anon:36kB active_file:112160kB inactive_file:11836kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137992kB dirty:1500kB writeback:0kB shmem:219764kB kernel_stack:4288kB pagetables:7156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 769.170534][ T29] audit: type=1400 audit(769.102:185948): avc: denied { prog_load } for pid=27724 comm="syz.9.8196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 769.178205][T27725] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 769.186259][ T29] audit: type=1400 audit(769.102:185949): avc: denied { bpf } for pid=27724 comm="syz.9.8196" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 769.189384][T27725] lowmem_reserve[]: 0 [ 769.192508][ T29] audit: type=1400 audit(769.102:185950): avc: denied { perfmon } for pid=27724 comm="syz.9.8196" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 769.198799][T27725] 2880 [ 769.222704][ T29] audit: type=1400 audit(769.112:185951): avc: denied { perfmon } for pid=27724 comm="syz.9.8196" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 769.267847][T27725] 7859 7859 [ 769.267914][T27725] Node 0 [ 769.292619][ T29] audit: type=1400 audit(769.112:185952): avc: denied { perfmon } for pid=27724 comm="syz.9.8196" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 769.317816][T27725] DMA32 free:2945992kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 769.345582][ T29] audit: type=1400 audit(769.112:185953): avc: denied { perfmon } for pid=27724 comm="syz.9.8196" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 769.345616][ T29] audit: type=1400 audit(769.112:185954): avc: denied { perfmon } for pid=27724 comm="syz.9.8196" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 769.364348][T27725] lowmem_reserve[]: 0 0 4978 4978 [ 769.565472][T27725] Node 0 Normal free:3968312kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:266700kB inactive_anon:36kB active_file:112160kB inactive_file:11836kB unevictable:0kB writepending:1500kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:28056kB local_pcp:20116kB free_cma:0kB [ 769.599007][T27725] lowmem_reserve[]: 0 0 0 0 [ 769.603630][T27725] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 769.616553][T27725] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945992kB [ 769.632744][T27725] Node 0 Normal: 2192*4kB (UE) 1635*8kB (UE) 470*16kB (UE) 636*32kB (UME) 419*64kB (UE) 316*128kB (UME) 199*256kB (UME) 148*512kB (UM) 129*1024kB (UME) 94*2048kB (UME) 830*4096kB (UM) = 3967992kB [ 769.652419][T27725] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 769.661753][T27725] 86438 total pagecache pages [ 769.666481][T27725] 16 pages in swap cache [ 769.670759][T27725] Free swap = 124932kB [ 769.675043][T27725] Total swap = 124996kB [ 769.679250][T27725] 2097051 pages RAM [ 769.683085][T27725] 0 pages HighMem/MovableOnly [ 769.687838][T27725] 81271 pages reserved [ 769.725183][T27731] can0: slcan on ttyS3. [ 769.812556][T27731] can0 (unregistered): slcan off ttyS3. [ 769.956130][T27731] netlink: 'syz.8.8199': attribute type 4 has an invalid length. [ 769.963942][T27731] netlink: 152 bytes leftover after parsing attributes in process `syz.8.8199'. [ 770.105393][T27725] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.186852][T27726] lo speed is unknown, defaulting to 1000 [ 770.224447][T27725] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.381323][T27725] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.555067][T27725] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.729729][ T1618] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.770352][ T1618] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.801296][ T1618] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.826852][ T1618] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.570268][T27769] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 774.091319][ T29] kauditd_printk_skb: 1676 callbacks suppressed [ 774.091337][ T29] audit: type=1400 audit(774.072:187631): avc: denied { create } for pid=27834 comm="syz.7.8235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 774.172582][ T29] audit: type=1400 audit(774.102:187632): avc: denied { prog_load } for pid=27834 comm="syz.7.8235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 774.191491][ T29] audit: type=1400 audit(774.102:187633): avc: denied { bpf } for pid=27834 comm="syz.7.8235" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 774.211781][ T29] audit: type=1400 audit(774.102:187634): avc: denied { prog_load } for pid=27834 comm="syz.7.8235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 774.230544][ T29] audit: type=1400 audit(774.102:187635): avc: denied { bpf } for pid=27834 comm="syz.7.8235" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 774.250885][ T29] audit: type=1400 audit(774.112:187636): avc: denied { prog_load } for pid=27834 comm="syz.7.8235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 774.269644][ T29] audit: type=1400 audit(774.112:187637): avc: denied { bpf } for pid=27834 comm="syz.7.8235" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 774.290010][ T29] audit: type=1400 audit(774.112:187638): avc: denied { perfmon } for pid=27834 comm="syz.7.8235" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 774.310611][ T29] audit: type=1400 audit(774.112:187639): avc: denied { perfmon } for pid=27834 comm="syz.7.8235" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 774.331257][ T29] audit: type=1400 audit(774.112:187640): avc: denied { perfmon } for pid=27834 comm="syz.7.8235" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 774.477336][T27843] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8236'. [ 775.077493][T27857] loop8: detected capacity change from 0 to 128 [ 776.468001][T27890] can0: slcan on ttyS3. [ 776.548215][T27890] can0 (unregistered): slcan off ttyS3. [ 776.751862][T27890] netlink: 'syz.6.8253': attribute type 4 has an invalid length. [ 776.759744][T27890] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8253'. [ 777.278967][T27910] can0: slcan on ttyS3. [ 777.346902][T27910] can0 (unregistered): slcan off ttyS3. [ 777.538514][T27910] netlink: 'syz.6.8260': attribute type 4 has an invalid length. [ 777.546315][T27910] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8260'. [ 778.852852][T27958] loop8: detected capacity change from 0 to 256 [ 778.965931][T27958] FAT-fs (loop8): Directory bread(block 64) failed [ 779.006360][T27958] FAT-fs (loop8): Directory bread(block 65) failed [ 779.012969][T27958] FAT-fs (loop8): Directory bread(block 66) failed [ 779.061143][T27958] FAT-fs (loop8): Directory bread(block 67) failed [ 779.082824][T27958] FAT-fs (loop8): Directory bread(block 68) failed [ 779.106459][ T29] kauditd_printk_skb: 3001 callbacks suppressed [ 779.106477][ T29] audit: type=1400 audit(779.082:190486): avc: denied { map_create } for pid=27962 comm="syz.9.8273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 779.129514][T27958] FAT-fs (loop8): Directory bread(block 69) failed [ 779.131859][ T29] audit: type=1400 audit(779.092:190487): avc: denied { perfmon } for pid=27962 comm="syz.9.8273" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 779.178988][T27958] FAT-fs (loop8): Directory bread(block 70) failed [ 779.195032][T27958] FAT-fs (loop8): Directory bread(block 71) failed [ 779.216492][T27958] FAT-fs (loop8): Directory bread(block 72) failed [ 779.239516][T27967] audit: audit_backlog=65 > audit_backlog_limit=64 [ 779.246154][T27967] audit: audit_lost=2246 audit_rate_limit=0 audit_backlog_limit=64 [ 779.254079][T27967] audit: backlog limit exceeded [ 779.258781][ T29] audit: type=1400 audit(779.092:190488): avc: denied { map_create } for pid=27963 comm="syz.7.8271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 779.261650][T27958] FAT-fs (loop8): Directory bread(block 73) failed [ 779.277813][ T29] audit: type=1400 audit(779.092:190489): avc: denied { bpf } for pid=27963 comm="syz.7.8271" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 779.304535][ T29] audit: type=1400 audit(779.092:190490): avc: denied { map_read map_write } for pid=27963 comm="syz.7.8271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 779.312583][T27958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 779.324145][ T29] audit: type=1400 audit(779.152:190491): avc: denied { prog_load } for pid=27963 comm="syz.7.8271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 779.478068][T27958] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 779.486746][T27958] FAT-fs (loop8): Filesystem has been set read-only [ 779.493428][T27958] syz.8.8270: attempt to access beyond end of device [ 779.493428][T27958] loop8: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 779.526007][T27958] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 779.534968][T27958] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 779.546259][T27958] syz.8.8270: attempt to access beyond end of device [ 779.546259][T27958] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 779.560477][T27958] syz.8.8270: attempt to access beyond end of device [ 779.560477][T27958] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 779.799161][T27979] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 780.340060][T27988] syzkaller1: entered promiscuous mode [ 780.345625][T27988] syzkaller1: entered allmulticast mode [ 780.362721][T27988] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.412921][T27988] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.508859][T27988] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.578231][T27988] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.694985][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.711287][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.731841][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.759394][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.856019][T28003] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.8284'. [ 780.869814][T28003] netlink: zone id is out of range [ 780.875113][T28003] netlink: zone id is out of range [ 780.883446][T28003] netlink: zone id is out of range [ 780.888763][T28003] netlink: zone id is out of range [ 780.895805][T28003] netlink: zone id is out of range [ 780.900975][T28003] netlink: zone id is out of range [ 780.906333][T28003] netlink: zone id is out of range [ 780.911480][T28003] netlink: zone id is out of range [ 780.916819][T28003] netlink: zone id is out of range [ 781.637708][T28023] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.8292'. [ 781.895605][T28031] can0: slcan on ttyS3. [ 781.977751][T28031] can0 (unregistered): slcan off ttyS3. [ 782.020297][T28033] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8297'. [ 782.096778][T28031] netlink: 'syz.6.8296': attribute type 4 has an invalid length. [ 782.104582][T28031] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8296'. [ 782.434444][T28046] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.8302'. [ 782.726397][T28057] FAULT_INJECTION: forcing a failure. [ 782.726397][T28057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.739631][T28057] CPU: 1 UID: 0 PID: 28057 Comm: syz.6.8305 Not tainted syzkaller #0 PREEMPT(voluntary) [ 782.739666][T28057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 782.739682][T28057] Call Trace: [ 782.739691][T28057] [ 782.739699][T28057] __dump_stack+0x1d/0x30 [ 782.739727][T28057] dump_stack_lvl+0x95/0xd0 [ 782.739830][T28057] dump_stack+0x15/0x1b [ 782.739859][T28057] should_fail_ex+0x265/0x280 [ 782.739909][T28057] should_fail+0xb/0x20 [ 782.739932][T28057] should_fail_usercopy+0x1a/0x20 [ 782.739963][T28057] _copy_from_user+0x1c/0xb0 [ 782.739997][T28057] ___sys_recvmsg+0xaa/0x370 [ 782.740098][T28057] ? _parse_integer+0x27/0x40 [ 782.740181][T28057] do_recvmmsg+0x1ef/0x540 [ 782.740261][T28057] ? fput+0x8f/0xc0 [ 782.740289][T28057] __x64_sys_recvmmsg+0xe5/0x170 [ 782.740390][T28057] x64_sys_call+0x2b75/0x3000 [ 782.740427][T28057] do_syscall_64+0xca/0x2b0 [ 782.740470][T28057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.740507][T28057] RIP: 0033:0x7f758e32f749 [ 782.740599][T28057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.740618][T28057] RSP: 002b:00007f758cd8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 782.740637][T28057] RAX: ffffffffffffffda RBX: 00007f758e585fa0 RCX: 00007f758e32f749 [ 782.740650][T28057] RDX: 0000000000000001 RSI: 0000200000009c00 RDI: 0000000000000003 [ 782.740666][T28057] RBP: 00007f758cd8f090 R08: 0000000000000000 R09: 0000000000000000 [ 782.740682][T28057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.740697][T28057] R13: 00007f758e586038 R14: 00007f758e585fa0 R15: 00007ffce0d53f38 [ 782.740794][T28057] [ 783.359002][T28072] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 784.115964][ T29] kauditd_printk_skb: 1537 callbacks suppressed [ 784.115984][ T29] audit: type=1400 audit(784.082:192006): avc: denied { prog_load } for pid=28083 comm="syz.8.8316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 784.141667][ T29] audit: type=1400 audit(784.082:192007): avc: denied { bpf } for pid=28082 comm="syz.9.8315" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 784.161927][ T29] audit: type=1400 audit(784.082:192008): avc: denied { bpf } for pid=28083 comm="syz.8.8316" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 784.182326][ T29] audit: type=1400 audit(784.082:192009): avc: denied { prog_run } for pid=28082 comm="syz.9.8315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 784.201178][ T29] audit: type=1400 audit(784.092:192010): avc: denied { prog_load } for pid=28086 comm="syz.6.8317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 784.220014][ T29] audit: type=1400 audit(784.102:192011): avc: denied { bpf } for pid=28086 comm="syz.6.8317" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 784.320204][T28087] audit: audit_backlog=65 > audit_backlog_limit=64 [ 784.323100][T28085] audit: audit_backlog=65 > audit_backlog_limit=64 [ 784.326811][T28087] audit: audit_lost=2255 audit_rate_limit=0 audit_backlog_limit=64 [ 784.326829][T28087] audit: backlog limit exceeded [ 784.376386][T28085] Invalid ELF header magic: != ELF [ 784.409056][T28085] loop8: detected capacity change from 0 to 512 [ 784.472321][T28085] EXT4-fs (loop8): orphan cleanup on readonly fs [ 784.508916][T28085] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.8316: bad orphan inode 13 [ 784.536647][T28085] ext4_test_bit(bit=12, block=18) = 1 [ 784.542175][T28085] is_bad_inode(inode)=0 [ 784.546393][T28085] NEXT_ORPHAN(inode)=2130706432 [ 784.551268][T28085] max_ino=32 [ 784.554529][T28085] i_nlink=1 [ 784.684037][T28085] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 784.798025][T28085] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 784.840323][T28085] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 784.945879][T28101] net_ratelimit: 147 callbacks suppressed [ 784.945955][T28101] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 785.003938][T26772] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.351238][T28103] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.8321'. [ 785.381412][T28103] netlink: zone id is out of range [ 785.386774][T28103] netlink: zone id is out of range [ 785.395843][T28103] netlink: zone id is out of range [ 785.401080][T28103] netlink: zone id is out of range [ 785.421019][T28103] netlink: zone id is out of range [ 785.426351][T28103] netlink: zone id is out of range [ 785.431500][T28103] netlink: zone id is out of range [ 785.436832][T28103] netlink: zone id is out of range [ 785.442035][T28103] netlink: zone id is out of range [ 785.649177][T28108] can0: slcan on ttyS3. [ 785.715844][T28108] can0 (unregistered): slcan off ttyS3. [ 785.842817][T28108] netlink: 'syz.5.8324': attribute type 4 has an invalid length. [ 785.850730][T28108] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8324'. [ 785.865275][T28114] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8322'. [ 785.927289][T28117] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8322'. [ 786.010334][T28118] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8327'. [ 786.086668][T28124] Invalid ELF header magic: != ELF [ 786.311063][T28130] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.8330'. [ 786.588128][T28139] Invalid ELF header magic: != ELF [ 786.654551][T28139] loop8: detected capacity change from 0 to 512 [ 786.695516][T28139] EXT4-fs (loop8): orphan cleanup on readonly fs [ 786.743122][T28139] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.8332: bad orphan inode 13 [ 786.856155][T28139] ext4_test_bit(bit=12, block=18) = 1 [ 786.861599][T28139] is_bad_inode(inode)=0 [ 786.865816][T28139] NEXT_ORPHAN(inode)=2130706432 [ 786.870739][T28139] max_ino=32 [ 786.873984][T28139] i_nlink=1 [ 786.923016][T28139] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 787.009395][T28139] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 787.075432][T28139] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 787.130706][T26772] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.180281][T28146] can0: slcan on ttyS3. [ 787.237032][T28146] can0 (unregistered): slcan off ttyS3. [ 787.395179][T28146] netlink: 'syz.5.8335': attribute type 4 has an invalid length. [ 787.403045][T28146] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8335'. [ 787.885503][T28163] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8342'. [ 787.925035][T28163] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8342'. [ 789.155344][ T29] kauditd_printk_skb: 2175 callbacks suppressed [ 789.155367][ T29] audit: type=1400 audit(789.132:193999): avc: denied { unmount } for pid=24209 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 789.240463][ T29] audit: type=1400 audit(789.192:194000): avc: denied { prog_load } for pid=28204 comm="syz.5.8355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 789.259330][ T29] audit: type=1400 audit(789.192:194001): avc: denied { bpf } for pid=28204 comm="syz.5.8355" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 789.279592][ T29] audit: type=1400 audit(789.192:194002): avc: denied { perfmon } for pid=28204 comm="syz.5.8355" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 789.300168][ T29] audit: type=1400 audit(789.192:194003): avc: denied { perfmon } for pid=28204 comm="syz.5.8355" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 789.320760][ T29] audit: type=1400 audit(789.192:194004): avc: denied { perfmon } for pid=28204 comm="syz.5.8355" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 789.341517][ T29] audit: type=1400 audit(789.192:194005): avc: denied { perfmon } for pid=28204 comm="syz.5.8355" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 789.362111][ T29] audit: type=1400 audit(789.192:194006): avc: denied { perfmon } for pid=28204 comm="syz.5.8355" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 789.382695][ T29] audit: type=1400 audit(789.192:194007): avc: denied { bpf } for pid=28204 comm="syz.5.8355" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 789.402953][ T29] audit: type=1400 audit(789.192:194008): avc: denied { bpf } for pid=28204 comm="syz.5.8355" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 789.547362][T28218] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8359'. [ 789.616907][T28218] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8359'. [ 790.287054][T28243] Invalid ELF header magic: != ELF [ 790.332965][T28243] loop8: detected capacity change from 0 to 512 [ 790.372378][T28243] EXT4-fs (loop8): orphan cleanup on readonly fs [ 790.396198][T28243] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.8366: bad orphan inode 13 [ 790.415767][T28243] ext4_test_bit(bit=12, block=18) = 1 [ 790.421299][T28243] is_bad_inode(inode)=0 [ 790.425549][T28243] NEXT_ORPHAN(inode)=2130706432 [ 790.430532][T28243] max_ino=32 [ 790.433756][T28243] i_nlink=1 [ 790.532310][T28243] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 790.610088][T28243] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 790.651867][T28243] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 790.714293][T26772] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.943834][T28258] can0: slcan on ttyS3. [ 791.005845][T28258] can0 (unregistered): slcan off ttyS3. [ 791.090077][T28258] netlink: 'syz.7.8373': attribute type 4 has an invalid length. [ 791.097967][T28258] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8373'. [ 791.136775][T28264] Invalid ELF header magic: != ELF [ 791.315727][T28266] ================================================================== [ 791.323882][T28266] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault [ 791.330965][T28266] [ 791.333315][T28266] write to 0xffff888107829fe8 of 8 bytes by task 28263 on cpu 0: [ 791.341057][T28266] shmem_fallocate+0x262/0x890 [ 791.345881][T28266] vfs_fallocate+0x3b6/0x400 [ 791.350623][T28266] madvise_vma_behavior+0x2a1/0x1ed0 [ 791.355943][T28266] madvise_do_behavior+0x5ee/0xa20 [ 791.361087][T28266] do_madvise+0x10e/0x190 [ 791.365448][T28266] __x64_sys_madvise+0x64/0x80 [ 791.370241][T28266] x64_sys_call+0x1c6b/0x3000 [ 791.374952][T28266] do_syscall_64+0xca/0x2b0 [ 791.379496][T28266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.385425][T28266] [ 791.387856][T28266] read to 0xffff888107829fe8 of 8 bytes by task 28266 on cpu 1: [ 791.395510][T28266] shmem_fault+0x90/0x250 [ 791.399878][T28266] __do_fault+0xbc/0x200 [ 791.404157][T28266] handle_mm_fault+0xfab/0x2c60 [ 791.409044][T28266] __get_user_pages+0x1024/0x1ed0 [ 791.414105][T28266] __mm_populate+0x243/0x3a0 [ 791.418729][T28266] vm_mmap_pgoff+0x232/0x2e0 [ 791.423344][T28266] ksys_mmap_pgoff+0xc2/0x310 [ 791.428054][T28266] x64_sys_call+0x16bb/0x3000 [ 791.432770][T28266] do_syscall_64+0xca/0x2b0 [ 791.437318][T28266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.443246][T28266] [ 791.445591][T28266] value changed: 0x0000000000000000 -> 0xffffc90001517b48 [ 791.452737][T28266] [ 791.455078][T28266] Reported by Kernel Concurrency Sanitizer on: [ 791.461248][T28266] CPU: 1 UID: 0 PID: 28266 Comm: syz.6.8374 Not tainted syzkaller #0 PREEMPT(voluntary) [ 791.471165][T28266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 791.481256][T28266] ==================================================================