last executing test programs: 5.10190902s ago: executing program 4 (id=58): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x70}, 0x1, 0x7}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x80010, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x5, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x4e8, 0xffffffff, 0x0, 0x290, 0x0, 0xfeffffff, 0xffffffff, 0x418, 0x418, 0x418, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xd8, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d5], 0xffffd8b7, 0x8, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0xff000000, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0}, 0x18) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) ioctl$SIOCX25SENDCALLACCPT(r7, 0x89e9) 4.703720225s ago: executing program 4 (id=60): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r3 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x80079af, 0x1, 0x8000, 0x408652}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x0, 0x1e0, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000080}, 0x95) r9 = dup3(r7, r8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r9, 0x10f, 0x88) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 4.062650371s ago: executing program 3 (id=64): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0xfffffffe, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000380)={0x2ea4, r6, 'id1\x00'}) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000940)=0x707987cd) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) recvmsg(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x74ebdffb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$vsock_stream(0x28, 0x1, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r12}, 0x18) connect$vsock_stream(r11, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r11, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r13, 0x4b66, &(0x7f0000000000)={0xfffffc64, 0x0}) fremovexattr(r1, &(0x7f0000000300)=@random={'osx.', '\'@)\x00'}) 3.529023988s ago: executing program 4 (id=65): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x324, r2, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x310, 0x11d, 0x0, 0x1, [{0x30c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x57}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x248, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x8}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x6, 0x6}, {0x6}, {0x6, 0xa}, {0x1, 0x6}, {0x1, 0xa}, {0x7, 0x8}, {0x7, 0x9}, {0x5, 0x9}, {0x6, 0xa}, {0x6}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x4}, {0x6, 0x5}, {0x2, 0x6}, {0x4, 0xa}, {0x0, 0x7}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x4, 0x7}, {0x7, 0x4}, {0x1, 0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x7, 0x9, 0x18, 0x3ff, 0x9, 0x8, 0xdfea]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0x2}, {0x0, 0x9}, {0x4, 0xa}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x1, 0x4}, {0x1, 0x9}, {0x2, 0x3}, {0x7, 0x4}, {0x6, 0x8}, {0x4, 0x5}, {0x6, 0x8}, {0x7}, {0x6, 0x6}, {}, {0x1, 0xa}, {0x4}, {0x3, 0x5}, {0x7}, {0x2, 0x7}, {0x6, 0x7}, {0x4, 0x2}, {0x4, 0x4}, {0x0, 0x3}, {0x0, 0x9}, {0x6, 0x9}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x5}, {0x4, 0x6}, {0x5, 0x2}, {0x1, 0x3}, {0x2, 0x6}, {0x7, 0xa}, {0x3, 0x6}, {0x3, 0x5}, {0x2, 0x8}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x5}, {0x5}, {}, {0x5, 0xa}, {0x0, 0xa}, {0x7}, {0x5, 0x4}, {0x0, 0x7}, {0x3, 0x7}, {0x5, 0x8}, {0x2, 0x9}, {0x3, 0x9}, {0x4, 0x5}, {0x6, 0x6}, {0x3}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x9}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x1, 0x7}, {0x3, 0x3}, {0x6, 0x3}, {0x5, 0x3}, {0x2}, {0x6, 0x7}, {0x7, 0x5}, {0x1, 0x4}, {0x5}, {0x6, 0x4}, {0x3}, {0x2}, {0x1, 0x1}, {0x3, 0x6}, {0x7, 0xa}, {0x4, 0x3}, {0x4, 0xa}]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x5, 0x8086, 0x4, 0x9, 0x5, 0x3, 0x58]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0xb, 0x36, 0x48, 0x6, 0x1b, 0x5, 0x16, 0x16, 0x6c, 0x6c, 0x16, 0x1b, 0x5, 0x1, 0x48, 0x3a, 0x24, 0xc, 0x24, 0x48, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x60, 0x9, 0x16, 0x24, 0x4, 0x36, 0x5, 0x30, 0x3, 0x9, 0x4, 0x6c, 0x12, 0x18, 0x36, 0x48, 0x2, 0x24, 0x36, 0x6, 0x12]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x0, 0x36, 0x24, 0x9, 0x5, 0x1b, 0x3, 0x12, 0xc, 0x30, 0x60, 0x60, 0x1b, 0x5, 0x24, 0x30, 0x6, 0x1, 0x1, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x3}, {0x4}, {0x3, 0x9}, {0x2, 0x9}, {0x2, 0x6}, {0x2, 0x1}, {0x6, 0xa}, {0x5, 0x3}, {0x7, 0x1}, {0x6, 0x2}, {0x2, 0x5}, {0x3}, {0x3, 0x4}, {0x1, 0x3}, {0x5, 0x7}, {0x4, 0x6}, {0x4, 0x7}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0x7}, {0x0, 0x4}, {0x7, 0x5}, {0x1, 0x1}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x6, 0x60, 0x9, 0x2, 0x12, 0x2, 0x12, 0x9, 0x4, 0x30, 0x2, 0xc, 0x53, 0x18, 0x6, 0x48, 0x16, 0x9, 0x18, 0xc, 0x6, 0x36, 0x6, 0xb, 0xc]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x8}, {0x7, 0x4}, {0x7, 0x7}, {}, {0x1, 0x8}, {0x3, 0x7}, {0x6, 0xa}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x7}, {0x6, 0x1}, {0x6, 0x5}, {0x2}, {0x2, 0x2}, {0x2, 0x3}, {0x1, 0x6}, {0x3, 0xa}, {0x5}, {0x4, 0x9}, {0x7, 0x4}, {0x2}, {0x7, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x7, 0x7}, {0x4, 0x1}, {0x1, 0x1}, {0x7, 0x5}, {0x7, 0x9}, {0x5, 0xa}, {0x3, 0x1}, {0x1, 0x8}, {0x4, 0xa}, {0x7, 0x4}, {0x2, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x1, 0x9}, {0x4, 0x2}, {0x6, 0x9}, {0x3, 0x7}, {0x1}, {0x5, 0x5}, {0x1, 0xa}, {0x5, 0x6}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x3}, {0x4, 0xa}, {0x4, 0x4}, {0x0, 0x3}, {0x6, 0x7}, {0x0, 0xa}, {0x7, 0x8}, {0x2, 0x8}, {0x3, 0x6}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x7, 0x3}, {0x6, 0x6}, {0x7, 0xa}, {0x4, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x5, 0x8}, {0x2, 0xa}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0xd, 0x20, 0x7, 0x7200, 0x8001, 0xfa6c, 0x8e4c]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4a3e, 0xec, 0x9, 0xfffe, 0x9, 0xbea9, 0xffff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x48, 0xb, 0x3, 0x30, 0x6, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0xb, 0x12, 0x9, 0x1b, 0x4a7384807cb449bc, 0x4, 0x36, 0xc, 0x48, 0x6, 0xb, 0x9, 0x36, 0x30, 0x30, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x1, 0x1, 0x1, 0x8cf7, 0x6, 0xfffe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0xd, 0x1c00, 0x7, 0x5, 0x7, 0x29e, 0x5]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xc2ee, 0x8, 0x1, 0xbd0, 0x8, 0x2, 0x81]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10}]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r4, 0x0, 0x1000000000000}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x4000000010000, 0x5a9e, 0x5, 0x4000000000000008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet_sctp(0x2, 0x5, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r8}}], 0x20, 0x2400e044}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r8, 0x9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) r9 = socket$inet6(0xa, 0x80002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x60) 3.441816396s ago: executing program 1 (id=66): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES64=0x0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r2, 0x407, 0x401) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x1, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa041, 0xd) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095", @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r4}, 0x18) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) write$cgroup_int(r5, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r8 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x42040, 0x0) fcntl$setlease(r8, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r3], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) 3.419500358s ago: executing program 2 (id=67): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) getpid() r2 = socket$kcm(0x29, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f0000000e80)=@ethtool_perm_addr={0x4b, 0x25}}) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0x8eef0a3e) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f0000000880)={{0x80}, 'port0\x00', 0x3c, 0x151625, 0x2, 0x2, 0x20107, 0x6, 0x8, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 3.312957528s ago: executing program 3 (id=68): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}], 0x1, 0x60010020, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000400)={[{@init_itable_val={'init_itable', 0x3d, 0x2}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@errors_remount}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='vm_unmapped_area\x00', r5, 0x0, 0x8}, 0x18) io_setup(0x6, &(0x7f0000001380)) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsmount(r6, 0x1, 0x82) bind$netlink(r0, &(0x7f0000000d80)={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0xc) 3.076982258s ago: executing program 0 (id=69): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$eJzs3c+LG1UcAPDvZHf7W9tCKSoiCz1Yqc12d/1RwUM9ihYLeq9hM13KJk3ZZEt3Ldge7MWLFEHEgnjXu8fiP+BfUdBCkbLowUtkspNt2k266TZttubzgSnvZSZ5852Z7+ubvFkSwMiazP4pRLwcEd8kEfsjIsnXjUe+cnJtu9V7V+ayJYlm89O/ktZ2Wb39We337c0rL0XEb19FHCtsbLe+vLJQqlTSxbw+1ahenKovrxw/Xy3Np/PphZlm8+TbszPvvfvOwGJ948w/339y68OTXx9Z/e6XOwdvJHEq9uXrOuN4Alc7K5MxmR+TiTj10IbTA2hsO0mGvQNsyVie5xOR9QH7YyzPeuD/78uIaAIjKpH/MKLa44D2vf2A7oOfG3c/WLsB2hj/+Np3I7GrdW+0ZzV54M4ou989MID2szZ+/fPmjWyJwX0PAbCpq9ci4sT4+Mb+L8n7v6070cc2D7eh/4Nn51Y2/nmz2/insD7+iS7jn71dcncrNs//wp0BNNNTNv57v+v4d33S6sBYXnuhNeabSM6dr6RZ3/ZiRByNiZ1Z/VHzOSdXbzd7resc/2VL1n57LJjvx53xnQ++p1xqlJ4k5k53r0W80nX8m6yf/6TL+c+Ox5k+2zic3nyt17rN43+6mj9FvN71/N+f0Uq6zk/Ozubzk1Ot62GqfVVs9Pf1w7/3an/Y8Wfnf8+j4z+QdM7X1h+/jR93/Zv2WvdA/NH/9b8j+axV3pG/drnUaCxOR+xIPt74+sz997br7e2z+I8eeXT/1+363x0Rn/cZ//VDP7/aV/xDOv/lxzr/j1+4/dEXP/Rqv7/+761W6Wj+Sj/9X787+CTHDgAAAAAAALabQkTsi6RQXC8XCsXi2vMdh2JPoVKrN46dqy1dKMe1fWvPPxTaM937O56HmM6fh23XZx6qz0bEwYj4dmx3q16cq1XKww4eAAAAAAAAAAAAAAAAAAAAtom9Pf7+P/PH2LD3Dnjq/OQ3jK5N838Qv/QEbEv+/4fRJf9hdMl/GF3yH0aX/IfRJf9hdMl/GF3yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbqzOnT2dJcvXdlLquXLy0vLdQuHS+n9YVidWmuOFdbvFicr9XmK2lxrlbd7PMqtdrF6ZlYujzVSOuNqfryytlqbelC4+z5amk+PZtOPJOoAAAAAAAAAAAAAAAAAAAA4PlSX15ZKFUq6aKCwpYK49tjNxQGXBh2zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9/0XAAD//zWdOco=") mkdir(&(0x7f0000000000)='./control\x00', 0x81) syz_emit_ethernet(0x26, &(0x7f0000000240)=ANY=[], 0x0) r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) fcntl$setown(r0, 0x8, r2) mkdirat(r1, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xb4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_pidfd_open(r3, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x17) pipe2(&(0x7f0000000440)={0x0, 0x0}, 0x6000) r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r6, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r4}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000640)='LX[X\x00.]%Jk\xe8\xd4M\xd7\xf9m\xa7%\xe5)J81`.\x7f7\xa6\'\x1f4\x06_0\xf3\x05\xc8\xcc\xf8\r:\r*w\x8d\xbd\x02\xd3F\x83\x82u3\xc7\x1bp\xa1=\xdb\x9e8H\a\xdc(\xb9\x84\f%\xb8\xd8\xd9\xa2`2\xc6V\xda\x14@\x12-\x94e\xca\xb8\xf8\x0e\xf4\xb2\x87J3\x9eucSYT\x81\xb2t\x13*\x8c\x8d\xdf\x17\xcc\xa7nO\xbb\x05\x95;\xcd\x10\x80\xfdx$\xc6CLk.\xe4Nin\xdaXH(\x97\xd1\x03\xe6\xec\x1d)\x98\xca\x83hy\x11\a\xda\xac\xfb{\xa6\xdd\x7f\xe2\xf5\xc4p=\x14v\x91\x92Hhd42\xbb\x00\x00\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') rmdir(0x0) 2.852560859s ago: executing program 2 (id=70): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xa}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) io_uring_enter(0xffffffffffffffff, 0x351e, 0x483, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000380)={[{@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@usrjquota}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) readahead(0xffffffffffffffff, 0x9, 0x9) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404e"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001480)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) 2.851548999s ago: executing program 3 (id=71): getrandom(0x0, 0x0, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f00000008c0), &(0x7f0000000880)=r4}, 0x20) r5 = syz_io_uring_setup(0xb43, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x208, 0x20a, 0x278, 0x208, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'syzkaller1\x00', 'geneve0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x7a, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x7, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r9, 0x10c, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) io_uring_enter(r5, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='kfree\x00', r10, 0x0, 0xffffffffffffffff}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='console\x00', r1}, 0x18) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r12}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f0000001340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@grpid}, {@lazytime}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$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") r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@struct={0x3, 0x2, 0x0, 0x4, 0x0, 0x3, [{0x1, 0x1, 0x7fffffff}, {0x8, 0x0, 0x3}]}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000080)=""/15, 0x4f, 0xf, 0x1, 0x9e, 0x10000}, 0x28) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file1\x00', 0x0, 0x0, r11}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd290, 0x0, 0x0, 0x0, 0xc}, [@call={0x85, 0x0, 0x0, 0x66}, @call={0x85, 0x0, 0x0, 0x1a}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xb9, &(0x7f0000000380)=""/185, 0x41100, 0x27, '\x00', 0x0, 0x0, r13, 0x8, &(0x7f0000000600)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x7, 0x3, 0x4}, 0x10, 0x1613d, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[r14, r0, 0x1, r0, r2, r2], 0x0, 0x10, 0x4}, 0x94) 2.761827386s ago: executing program 0 (id=72): r0 = socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000040000000000d8ff9cda9a0f5ed7b4d6cb74c439df4fa41f75e3b773c8ed45b9a1593266feedcc5953b3ada5625d1defb2d7d77249ca549117b357beff283e02d21c14fa1ff2d9e75131bb335367898b1a6bcf6ece038535284eac71bd6ce3bcc3899f180312f4ddb94ddeca00"/138, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB='L \x00e', @ANYRES16=r0, @ANYBLOB="010027bd700002901efbd3df250200000005000400010000000500040001000000140002056f5f7465616d0000000900030073797a320000000009001b503ff5dd45d6b611b883aa5250ede6c3841786308228f89f883d6d2279dd156838c071a3b327d8a0b2e3c31745c0a29aae5ce91b207aa708a52ba08636cde27ce9e398223bb53accf3ae59aaa665cfe0cb7371100fa6e2ba4a827a9b47bd76206bb7fa94fd235ad98cc7db8ee295283c83507eabfaf65c9b857bf3652113"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) fstat(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r8, r9) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r7, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r10, &(0x7f0000000080)='./file0\x00') renameat(r10, &(0x7f0000000000)='./file0\x00', r10, &(0x7f0000000740)='./file0/../file0\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/anycast6\x00') fchdir(r11) r12 = inotify_init() inotify_add_watch(r12, &(0x7f0000000000)='./file0\x00', 0x80000006) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 2.647779977s ago: executing program 4 (id=73): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x8000, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x800}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x62572899, 0x1ff, 0x8, 0x0, 0x3}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x20000000, 0x8000, 0x0, 0xe}, {0x3, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x1}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r8 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x24}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r11, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}]}, 0x1c}, 0x4, 0x700000000000000}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004804}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r14 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r14, 0x0, 0x97}, 0x18) r15 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={{0x14, 0x3ea, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r15, &(0x7f00000012c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$key(r3, 0x0, 0x0) 2.360789662s ago: executing program 1 (id=74): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2, 0x7}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200000ca2ffffb703000008000000b704000000000000850000000100000095", @ANYRES64=r0, @ANYRESHEX, @ANYRES64=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="b7b64d8c16de1717700143c072f4c7acacea4addcc158ef4b1611b20a9b630", @ANYRES64=0x0, @ANYRES64=r0], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10840, &(0x7f0000000180)=ANY=[@ANYRES64=r2]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='erofs_destroy_inode\x00', r1, 0x0, 0x2}, 0x18) r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d8f185ac00000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) sysinfo(&(0x7f0000000540)=""/145) r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r8 = openat(r3, &(0x7f0000000180)='./file1\x00', 0x680642, 0x150) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r7, 0x0, 0xbf5, 0x2000402) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x404}, 0xffffffffffffffc5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0xc, r7, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) 2.15082149s ago: executing program 4 (id=75): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r0, &(0x7f0000000740)="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", 0xff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000080), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000001740)=r1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a00)={'ip6gre0\x00', &(0x7f0000001980)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x4, 0xfffffffc, 0x40, @remote, @empty, 0x8, 0x700, 0x4, 0xc}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0x14, &(0x7f00000017c0)=@raw=[@jmp={0x5, 0x1, 0x3, 0x0, 0x3, 0x20, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x0, 0x5, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x4c}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_val={0x18, 0xb, 0x2, 0x0, r4}], 0x0, 0x8, 0x68, &(0x7f0000001900)=""/104, 0x41100, 0x10, '\x00', r5, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a40)={0x4, 0xb, 0x559, 0x7f}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80), 0x10, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0xfc, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x19, 0x115, 0x70bd2b, 0x0, {0x2, 0x18, 0x80, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r9, &(0x7f0000000040), 0x10) bind$can_raw(r9, &(0x7f0000000080)={0x1d, r10}, 0x10) ioctl$USBDEVFS_BULK(r7, 0x5523, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x6}, {0xd}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x8000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000440) 2.128312422s ago: executing program 3 (id=76): r0 = socket$inet(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(r0, 0x1) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) geteuid() read(r3, &(0x7f0000000080)=""/1, 0x1) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) r5 = fsmount(r4, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x1, 'syzkaller1\x00'}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) close_range(r8, 0xffffffffffffffff, 0x0) 2.006525343s ago: executing program 1 (id=77): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32=r4], 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}], 0x1, 0x60010020, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000400)={[{@init_itable_val={'init_itable', 0x3d, 0x2}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@errors_remount}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYRESHEX, @ANYRES16=r1, @ANYRES8=r1, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, 0x0, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095d68bb6763f1b835b2da4204eb58f6f88afa73338d3a97ff7d3360001872657397ecb4b8483037341f5fbbc4ff9696eafa1dd9b65ca4314"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x6, &(0x7f0000001380)) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) bind$netlink(r0, &(0x7f0000000d80)={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000080)={0x50, 0x3, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) 1.837186668s ago: executing program 0 (id=78): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000013", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) ptrace$setopts(0x4206, r4, 0xffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1f071f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x1, 0x4000000009}, 0xa022, 0x4005, 0xb, 0x3, 0xfff, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xd, 0x7}, {0x0}, &(0x7f0000000480)=[{&(0x7f0000000f80)=""/162, 0xa2}], 0x1, 0x47}}], 0x48, 0x4000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) unshare(0x62040200) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x6}}, './file0\x00'}) syz_open_dev$usbfs(&(0x7f0000000480), 0x56, 0x160341) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@nomblk_io_submit}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") 1.157685548s ago: executing program 2 (id=79): socket$unix(0x1, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) io_setup(0x4082, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc, 0x13b}, &(0x7f0000000080), &(0x7f00000014c0)) io_destroy(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = epoll_create(0x3ff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f0000000440)={0x2000000}) mprotect(&(0x7f000095b000/0x3000)=nil, 0x3000, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = gettid() r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) lseek(r9, 0x8, 0x3) 1.13947896s ago: executing program 3 (id=80): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x4100, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf01000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="64000000020601080000000004000000000000001400078008001140000000000500150002000000050001000600000005"], 0x64}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r6, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES8=r5], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r11, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="06000010060000000600000003000000230a0400", @ANYRES32=r2, @ANYRES64=r6, @ANYRES64, @ANYRES32=r9, @ANYBLOB="00000000041300000100000000000000000000000007000000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scmi_xfer_response_wait\x00', r3}, 0x18) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r12, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000a}, 0x94) unshare(0x80) 1.138772069s ago: executing program 1 (id=90): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000340)='westwood\x00', 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01003a000000e25a7d501ba3f34a795e85af9aef5d81000000002000e7e490e680bf89988f28461027b650e0002000000002000000000000000000000d0a00000000000000010000"], 0x0, 0x3a, 0x0, 0x8}, 0x28) r2 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r3 = socket$inet6(0xa, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES8=r3, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r4, &(0x7f0000000780)=[{&(0x7f0000001440)="77be84c5e1d9540d0500f2589781f705267ee40e07de62d422fcf14690bea6df9ff392b473dada0648ce160cd4efd6360353e59f73e6dd25281174f05f60f688e11c5407dc71f3d75cb61f335b09c04555921726ceb2a885baf13bf4cba8ebdcb5d2d62f14170da553c3b552e0d3e501ec3bdea7de19dbe87c677900a6b8ddeffac60302fcd5b8837dc7cad59e0af7d274599fb3c29e3cab8751e6cb4b1b44fdde0b3e45c2d3a11453938467cd64ccbb8a7530fc5b251b21c4654933316f0514536f791a5ed7f7ab3c79c2154bfe520e3a1cf5a9dd7b53f24f231b387a6c225dcab7c3fced74d42b9b371fd208097cc3c83fd29bd44993086db6c2eb2d09bab7ca1883797d68edfb4aab380319e1e3a6a02c8c4018350f0812bf52f21898d35263efac9c223b14e273f9dc6d5d5409a7db686d894f1aed1a173bc448e6f25c040144db035147eff5f68c36f9669b0050576cfa60ce4c63d0946d0711c1cc0e61c83be1492ed40a47a80bbf4073300ff1e04941bcbc7a5fe00fff3e95feccb100135295f609cc4aae21018565ae5b4a5fe87fce9566c5c101f881fe16a7ae0c6007391277bf234af09daaae", 0x1ab}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0xf3a, 0x0) close(r8) write$binfmt_script(r9, 0x0, 0xd9) open_tree(0xffffffffffffff9c, 0x0, 0x0) write(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r10, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r10, 0x89ed, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040), 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b2008500"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={0x0, r11, 0x0, 0x8}, 0x18) 940.558037ms ago: executing program 0 (id=81): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001e00)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) getsockopt(r1, 0x6, 0x17, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000380)={0x10000008}) r4 = getpid() r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x800, 0x0, 0x40000337}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r8, 0x40187013, &(0x7f0000000180)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) sigaltstack(0x0, 0x0) r10 = syz_pidfd_open(r4, 0x0) setns(r10, 0x8020000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x39}, 0x18) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1100, 0x441, &(0x7f00000003c0)) 921.766159ms ago: executing program 2 (id=82): r0 = open(&(0x7f0000000180)='./bus\x00', 0xab7e, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa4}}, 0x200000d4) removexattr(&(0x7f0000000380)='./file1\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00') sendmsg$key(r2, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) r9 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r10 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6075ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r10, r9, r9, 0x0) keyctl$KEYCTL_MOVE(0x4, r8, r8, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x20048090) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000101010200000000e2000000000000010c0019800800010039000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) 891.606421ms ago: executing program 1 (id=83): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0}, 0x94) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x149640, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) close(r5) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB], 0x50) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB="0c00990008000003"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 794.48229ms ago: executing program 2 (id=84): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) syz_emit_ethernet(0x26, &(0x7f0000000240)=ANY=[], 0x0) r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) fcntl$setown(r0, 0x8, r2) mkdirat(r1, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xb4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_pidfd_open(r3, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x17) pipe2(&(0x7f0000000440)={0x0, 0x0}, 0x6000) r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r6, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r4}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000640)='LX[X\x00.]%Jk\xe8\xd4M\xd7\xf9m\xa7%\xe5)J81`.\x7f7\xa6\'\x1f4\x06_0\xf3\x05\xc8\xcc\xf8\r:\r*w\x8d\xbd\x02\xd3F\x83\x82u3\xc7\x1bp\xa1=\xdb\x9e8H\a\xdc(\xb9\x84\f%\xb8\xd8\xd9\xa2`2\xc6V\xda\x14@\x12-\x94e\xca\xb8\xf8\x0e\xf4\xb2\x87J3\x9eucSYT\x81\xb2t\x13*\x8c\x8d\xdf\x17\xcc\xa7nO\xbb\x05\x95;\xcd\x10\x80\xfdx$\xc6CLk.\xe4Nin\xdaXH(\x97\xd1\x03\xe6\xec\x1d)\x98\xca\x83hy\x11\a\xda\xac\xfb{\xa6\xdd\x7f\xe2\xf5\xc4p=\x14v\x91\x92Hhd42\xbb\x00\x00\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') rmdir(0x0) 794.04301ms ago: executing program 4 (id=85): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)=0x23) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r0, &(0x7f0000000740)="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", 0xff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000080), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{r0}, &(0x7f0000000400), &(0x7f0000001740)=r1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001980)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x4, 0xfffffffc, 0x40, @dev={0xfe, 0x80, '\x00', 0xf}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8, 0x700, 0x2, 0xc}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0x13, &(0x7f00000017c0)=@raw=[@jmp={0x5, 0x1, 0x3, 0x0, 0x3, 0x20, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x0, 0x5, 0x9, 0x1, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x4c}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x50}], 0x0, 0xc, 0x68, &(0x7f0000001900)=""/104, 0x41100, 0x10, '\x00', r4, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a40)={0x4, 0xb, 0x559, 0x7f}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80), 0x10, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0xfc, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c80)=ANY=[@ANYBLOB="24000000190015012bbd708f0b0f2d00021880040000c8000010000008000100ac1414001ad6e752296bb5"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000001880), 0x10) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r8}, 0x10) ioctl$USBDEVFS_BULK(r6, 0x5523, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x6}, {0xd}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x8000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000440) 793.09263ms ago: executing program 0 (id=95): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, 0x0, &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4808}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xa70, 0x10001, 0x2, 0x6, r3, 0xfffffffc, '\x00', r5, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x5}, 0x50) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)=r7}, 0x20) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2b, 0xffffff7d, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {0x12, 0xffff}, {0x9, 0x887796a063293a56}}}, 0x24}}, 0x40004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r10, 0x0, 0x4800) sendmsg$IPSET_CMD_DESTROY(r10, 0x0, 0x40814) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xffdc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r11, 0x0, 0x4}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) 474.477538ms ago: executing program 2 (id=86): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000d40)={0x8, 0x9, 0x7, 0x4, 0x1, 0x21, 0xfffe, 0x25}, &(0x7f0000000d80)={0x6, 0x4, 0x9, 0x0, 0x4, 0x4, 0x1000, 0x5}, &(0x7f0000000dc0)={0x7, 0xa, 0x6, 0x8, 0x2, 0x6, 0x582c, 0x2}, &(0x7f0000000e00)={0x77359400}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x14, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002120702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x0, 0x0, 0x8000003, 0x4, 0x0, 0x40d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu<=0||!') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_process_wait\x00', r0}, 0x18) syz_clone(0x4000011, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100042020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ff1b00b702000008000000b703000000000000850000ee0600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x2c, r5, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x2c}}, 0x40084) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x83ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000440)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x10, 0x0, 0x7ffc1ffb}]}) wait4(0x0, 0x0, 0x40000000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r7, 0x0, 0xf}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 1.52588ms ago: executing program 0 (id=87): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x2024, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_delete(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) write$binfmt_misc(r10, &(0x7f0000000980), 0xfdef) splice(r7, 0x0, r10, 0x0, 0x80, 0x4) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.13631ms ago: executing program 3 (id=88): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000000000) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000700)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4e24, 0x4, 0x4e21, 0x4, 0xa, 0x0, 0x20, 0x2c, 0x0, 0xee01}, {0x5, 0x4, 0x8, 0x2c, 0xffff, 0x1, 0x9, 0xac5}, {0x1, 0x450, 0x7, 0x8}, 0x1, 0x6e6bb7, 0x0, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d3, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3, 0x3, 0xd, 0x0, 0x5, 0x5}}, 0xe8) readahead(r1, 0x7300, 0x8) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000500)=0xc, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000010000000000000000000000fcffffff000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000fcffffff00000000"]}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 0s ago: executing program 1 (id=89): sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x24, &(0x7f00000031c0)={0x3, 0x0, 0x200}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000007c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000800), 0x2000022, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',ignoreqv,debrg=0x0000000000000007,pcr=00000000000000000011,smackfsroot=,fcname=-%#@}!&+,dont_appraise,permit_directio,fscontext=root,\x00']) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x10c, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xfc, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a6"]}]}, 0x10c}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r2}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. [ 33.403075][ T29] audit: type=1400 audit(1767991579.007:62): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.426179][ T29] audit: type=1400 audit(1767991579.027:63): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.428344][ T3308] cgroup: Unknown subsys name 'net' [ 33.453947][ T29] audit: type=1400 audit(1767991579.057:64): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.593691][ T3308] cgroup: Unknown subsys name 'cpuset' [ 33.599980][ T3308] cgroup: Unknown subsys name 'rlimit' [ 33.710806][ T29] audit: type=1400 audit(1767991579.307:65): avc: denied { setattr } for pid=3308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.734252][ T29] audit: type=1400 audit(1767991579.307:66): avc: denied { create } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.754840][ T29] audit: type=1400 audit(1767991579.307:67): avc: denied { write } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.775221][ T29] audit: type=1400 audit(1767991579.307:68): avc: denied { read } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.795556][ T29] audit: type=1400 audit(1767991579.337:69): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.816467][ T29] audit: type=1400 audit(1767991579.337:70): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.841329][ T29] audit: type=1400 audit(1767991579.337:71): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.846776][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.940072][ T3308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.114033][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 35.180640][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.187786][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.195097][ T3328] bridge_slave_0: entered allmulticast mode [ 35.201754][ T3328] bridge_slave_0: entered promiscuous mode [ 35.226391][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.233601][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.240796][ T3328] bridge_slave_1: entered allmulticast mode [ 35.247550][ T3328] bridge_slave_1: entered promiscuous mode [ 35.253896][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 35.290135][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.302528][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.343693][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.357978][ T3328] team0: Port device team_slave_0 added [ 35.367054][ T3328] team0: Port device team_slave_1 added [ 35.386176][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 35.422049][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 35.432897][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.439959][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.447316][ T3322] bridge_slave_0: entered allmulticast mode [ 35.453730][ T3322] bridge_slave_0: entered promiscuous mode [ 35.460514][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.467488][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.493401][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.508898][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.515965][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.541936][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.560408][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.567520][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.574760][ T3322] bridge_slave_1: entered allmulticast mode [ 35.581127][ T3322] bridge_slave_1: entered promiscuous mode [ 35.618220][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.625390][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.632506][ T3318] bridge_slave_0: entered allmulticast mode [ 35.639068][ T3318] bridge_slave_0: entered promiscuous mode [ 35.663221][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.670377][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.677586][ T3318] bridge_slave_1: entered allmulticast mode [ 35.684063][ T3318] bridge_slave_1: entered promiscuous mode [ 35.696432][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.714711][ T3328] hsr_slave_0: entered promiscuous mode [ 35.720778][ T3328] hsr_slave_1: entered promiscuous mode [ 35.732714][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.749720][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.763804][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.770888][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.778072][ T3321] bridge_slave_0: entered allmulticast mode [ 35.784547][ T3321] bridge_slave_0: entered promiscuous mode [ 35.796922][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.810962][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.818142][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.825305][ T3321] bridge_slave_1: entered allmulticast mode [ 35.831866][ T3321] bridge_slave_1: entered promiscuous mode [ 35.854026][ T3322] team0: Port device team_slave_0 added [ 35.864487][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.871640][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.878980][ T3319] bridge_slave_0: entered allmulticast mode [ 35.885426][ T3319] bridge_slave_0: entered promiscuous mode [ 35.897645][ T3322] team0: Port device team_slave_1 added [ 35.903807][ T3318] team0: Port device team_slave_0 added [ 35.919132][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.926237][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.933537][ T3319] bridge_slave_1: entered allmulticast mode [ 35.939998][ T3319] bridge_slave_1: entered promiscuous mode [ 35.951601][ T3318] team0: Port device team_slave_1 added [ 35.960716][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.986944][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.000633][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.007642][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.033673][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.057413][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.066746][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.073770][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.099818][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.111018][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.118004][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.143919][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.163835][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.183575][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.190547][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.216575][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.230434][ T3321] team0: Port device team_slave_0 added [ 36.247341][ T3319] team0: Port device team_slave_0 added [ 36.258435][ T3321] team0: Port device team_slave_1 added [ 36.275909][ T3319] team0: Port device team_slave_1 added [ 36.308882][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.315877][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.341816][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.361741][ T3322] hsr_slave_0: entered promiscuous mode [ 36.367915][ T3322] hsr_slave_1: entered promiscuous mode [ 36.373849][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 36.379603][ T3322] Cannot create hsr debugfs directory [ 36.390124][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.397105][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.423112][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.436524][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.443545][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.469651][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.482699][ T3318] hsr_slave_0: entered promiscuous mode [ 36.488711][ T3318] hsr_slave_1: entered promiscuous mode [ 36.494526][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 36.500241][ T3318] Cannot create hsr debugfs directory [ 36.517699][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.524727][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.550708][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.610859][ T3319] hsr_slave_0: entered promiscuous mode [ 36.616819][ T3319] hsr_slave_1: entered promiscuous mode [ 36.622617][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 36.628429][ T3319] Cannot create hsr debugfs directory [ 36.636004][ T3321] hsr_slave_0: entered promiscuous mode [ 36.642142][ T3321] hsr_slave_1: entered promiscuous mode [ 36.647999][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 36.653793][ T3321] Cannot create hsr debugfs directory [ 36.730125][ T3328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.741088][ T3328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.763461][ T3328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.780923][ T3328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.847629][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.856598][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.865731][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.879207][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.910353][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.921032][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.934195][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.945044][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.984440][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.996821][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.007109][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.018108][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.027180][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.040627][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.049762][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.062252][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.072964][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.090073][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.106489][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.117535][ T2321] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.124652][ T2321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.139398][ T2321] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.146524][ T2321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.157520][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.177572][ T1574] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.184697][ T1574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.198515][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.205577][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.259562][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.281601][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.294267][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.311727][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.318889][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.327585][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.334719][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.347555][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.371496][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.388306][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.402017][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.409227][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.424275][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.438174][ T2321] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.445301][ T2321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.457376][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.472820][ T2321] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.480053][ T2321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.489668][ T2321] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.496767][ T2321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.521064][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.602765][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.674381][ T3322] veth0_vlan: entered promiscuous mode [ 37.696490][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.713463][ T3328] veth0_vlan: entered promiscuous mode [ 37.719587][ T3322] veth1_vlan: entered promiscuous mode [ 37.735803][ T3328] veth1_vlan: entered promiscuous mode [ 37.746512][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.795085][ T3322] veth0_macvtap: entered promiscuous mode [ 37.805832][ T3328] veth0_macvtap: entered promiscuous mode [ 37.812687][ T3322] veth1_macvtap: entered promiscuous mode [ 37.823961][ T3328] veth1_macvtap: entered promiscuous mode [ 37.836383][ T3318] veth0_vlan: entered promiscuous mode [ 37.849949][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.860702][ T3318] veth1_vlan: entered promiscuous mode [ 37.884326][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.895354][ T3318] veth0_macvtap: entered promiscuous mode [ 37.904290][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.920106][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.928477][ T3318] veth1_macvtap: entered promiscuous mode [ 37.939374][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.957395][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.970201][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.982189][ T3321] veth0_vlan: entered promiscuous mode [ 37.989124][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.003798][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.014269][ T3321] veth1_vlan: entered promiscuous mode [ 38.027507][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.040672][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.049788][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.062160][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.084819][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.111104][ T3321] veth0_macvtap: entered promiscuous mode [ 38.125253][ T3328] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.139956][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.149661][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.160838][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.170089][ T3321] veth1_macvtap: entered promiscuous mode [ 38.185486][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.215763][ T3319] veth0_vlan: entered promiscuous mode [ 38.240520][ T3493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 38.253754][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.267979][ T3319] veth1_vlan: entered promiscuous mode [ 38.283275][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.299780][ T3493] loop3: detected capacity change from 0 to 1024 [ 38.306820][ T3493] ======================================================= [ 38.306820][ T3493] WARNING: The mand mount option has been deprecated and [ 38.306820][ T3493] and is ignored by this kernel. Remove the mand [ 38.306820][ T3493] option from the mount to silence this warning. [ 38.306820][ T3493] ======================================================= [ 38.344546][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.359809][ T3493] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.370687][ T3497] loop1: detected capacity change from 0 to 256 [ 38.377862][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.393531][ T3319] veth0_macvtap: entered promiscuous mode [ 38.412622][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.427449][ T3319] veth1_macvtap: entered promiscuous mode [ 38.433687][ T3493] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #11: comm syz.3.4: iget: bogus i_mode (1) [ 38.447771][ T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.460631][ T3497] FAT-fs (loop1): Directory bread(block 64) failed [ 38.467625][ T3493] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4: couldn't read orphan inode 11 (err -117) [ 38.467643][ T3497] FAT-fs (loop1): Directory bread(block 65) failed [ 38.487270][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.495748][ T3497] FAT-fs (loop1): Directory bread(block 66) failed [ 38.502373][ T3497] FAT-fs (loop1): Directory bread(block 67) failed [ 38.509467][ T3497] FAT-fs (loop1): Directory bread(block 68) failed [ 38.510827][ T3493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.516618][ T3497] FAT-fs (loop1): Directory bread(block 69) failed [ 38.535265][ T3497] FAT-fs (loop1): Directory bread(block 70) failed [ 38.541529][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.541788][ T3497] FAT-fs (loop1): Directory bread(block 71) failed [ 38.559616][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 38.559658][ T3497] FAT-fs (loop1): Directory bread(block 72) failed [ 38.559632][ T29] audit: type=1400 audit(1767991584.157:103): avc: denied { mount } for pid=3491 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.569848][ T3497] FAT-fs (loop1): Directory bread(block 73) failed [ 38.603100][ T1628] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.616562][ T3493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.625852][ T1628] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.645976][ T1628] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.667590][ T29] audit: type=1400 audit(1767991584.267:104): avc: denied { prog_run } for pid=3491 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.698093][ T1628] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.710131][ T29] audit: type=1400 audit(1767991584.287:105): avc: denied { mount } for pid=3496 comm="syz.1.2" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.758244][ T29] audit: type=1400 audit(1767991584.357:106): avc: denied { create } for pid=3491 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.765939][ T3497] IPv6: NLM_F_CREATE should be specified when creating new route [ 38.818471][ T29] audit: type=1400 audit(1767991584.357:107): avc: denied { write } for pid=3491 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.839053][ T29] audit: type=1400 audit(1767991584.357:108): avc: denied { create } for pid=3496 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.858284][ T29] audit: type=1400 audit(1767991584.357:109): avc: denied { setopt } for pid=3496 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.897786][ T3492] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3492 comm=syz.2.3 [ 38.960758][ T29] audit: type=1400 audit(1767991584.497:110): avc: denied { mount } for pid=3496 comm="syz.1.2" name="/" dev="ramfs" ino=3863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 38.982691][ T29] audit: type=1400 audit(1767991584.497:111): avc: denied { create } for pid=3496 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.001882][ T29] audit: type=1400 audit(1767991584.517:112): avc: denied { write } for pid=3496 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.128393][ T3518] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 39.309009][ T3519] loop3: detected capacity change from 0 to 512 [ 39.514379][ T3519] syz.3.6 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.543841][ T3519] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 39.545598][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.557171][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.564496][ T3527] loop2: detected capacity change from 0 to 128 [ 39.593564][ T3530] netlink: 'syz.0.9': attribute type 4 has an invalid length. [ 39.625430][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.657624][ T3532] loop0: detected capacity change from 0 to 1024 [ 39.687478][ T3532] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.700907][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.735444][ T3532] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 39.744494][ T3532] EXT4-fs (loop0): orphan cleanup on readonly fs [ 39.751580][ T3532] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 39.766231][ T3532] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 39.776156][ T3532] EXT4-fs (loop0): 1 truncate cleaned up [ 39.789230][ T3532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.807646][ T3541] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.10' sets config #0 [ 39.826753][ T3541] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.10' sets config #1 [ 39.847223][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.863756][ T1574] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.898625][ T1574] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.917361][ T1574] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.927936][ T1574] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.076174][ T3552] loop0: detected capacity change from 0 to 8192 [ 40.113005][ T3564] pim6reg: entered allmulticast mode [ 40.120610][ T3564] team0: entered allmulticast mode [ 40.125753][ T3564] team_slave_0: entered allmulticast mode [ 40.131559][ T3564] team_slave_1: entered allmulticast mode [ 40.139271][ T3564] team0: left allmulticast mode [ 40.144169][ T3564] team_slave_0: left allmulticast mode [ 40.149805][ T3564] team_slave_1: left allmulticast mode [ 40.156581][ T3564] pim6reg: left allmulticast mode [ 40.192788][ T3565] loop3: detected capacity change from 0 to 1024 [ 40.200315][ T3565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.214077][ T3565] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 40.232551][ T3565] System zones: 0-1, 3-36 [ 40.242985][ T3565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.314999][ T3568] random: crng reseeded on system resumption [ 40.340625][ T3568] Cannot find add_set index 0 as target [ 40.395339][ T3573] process 'syz.1.16' launched '/dev/fd/5' with NULL argv: empty string added [ 40.472219][ T3577] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 40.872996][ T3586] loop1: detected capacity change from 0 to 512 [ 40.880122][ T3586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.892023][ T3586] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.900767][ T3586] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.941079][ T3586] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.18: Allocating blocks 41-42 which overlap fs metadata [ 40.955530][ T3586] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.18: Allocating blocks 41-42 which overlap fs metadata [ 40.970435][ T3586] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.18: Failed to acquire dquot type 1 [ 40.985324][ T3586] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 40.999886][ T3586] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.18: corrupted inode contents [ 41.014123][ T3586] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.18: mark_inode_dirty error [ 41.025835][ T3586] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.18: corrupted inode contents [ 41.039535][ T3586] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.18: mark_inode_dirty error [ 41.051827][ T3586] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.18: corrupted inode contents [ 41.068050][ T3586] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 41.077986][ T3586] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.18: corrupted inode contents [ 41.090419][ T3586] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.18: mark_inode_dirty error [ 41.102137][ T3586] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 41.112679][ T3586] EXT4-fs (loop1): 1 truncate cleaned up [ 41.119404][ T3586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.256391][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.297733][ T3597] SELinux: Context × is not valid (left unmapped). [ 41.334726][ T3597] loop3: detected capacity change from 0 to 1024 [ 41.342368][ T3597] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.355485][ T3597] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.375439][ T3597] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.386376][ T3597] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 41.421423][ T3586] syz.1.18 (3586) used greatest stack depth: 9848 bytes left [ 41.432842][ T3597] JBD2: no valid journal superblock found [ 41.438686][ T3597] EXT4-fs (loop3): Could not load journal inode [ 41.446137][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.516302][ T3603] netlink: 176 bytes leftover after parsing attributes in process `syz.1.23'. [ 41.623896][ T3606] loop1: detected capacity change from 0 to 512 [ 41.655411][ T3606] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 41.665102][ T3606] EXT4-fs (loop1): 1 truncate cleaned up [ 41.678173][ T3606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.708721][ T3606] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 41.718321][ T3606] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.24: Logical block already allocated [ 41.730310][ T3606] EXT4-fs (loop1): Remounting filesystem read-only [ 42.059122][ T3610] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 42.110130][ T3593] Zero length message leads to an empty skb [ 42.160735][ T3610] Symlink component flag not implemented [ 42.180329][ T3610] Symlink component flag not implemented (7) [ 42.280861][ T3606] Set syz1 is full, maxelem 65536 reached [ 42.383062][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.423656][ T3615] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 42.467005][ T3615] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 42.479920][ T3620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 42.545800][ T3615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 42.555703][ T3615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 42.564845][ T3615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 42.600904][ T3624] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 42.635193][ T3624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 42.680237][ T3628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.696379][ T3624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 42.708908][ T3624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 42.718754][ T3633] netlink: 'syz.3.32': attribute type 3 has an invalid length. [ 42.726503][ T3628] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.733290][ T3633] netlink: 'syz.3.32': attribute type 3 has an invalid length. [ 42.750283][ T3624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 42.831711][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.943336][ T3647] iso9660: Unknown parameter ' ' [ 43.139831][ T3656] set_capacity_and_notify: 4 callbacks suppressed [ 43.139846][ T3656] loop3: detected capacity change from 0 to 256 [ 43.163126][ T3657] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 43.201446][ T3656] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.242357][ T3656] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.278363][ T3656] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 43.366283][ T3656] mmap: syz.3.37 (3656) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.410577][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 43.410593][ T29] audit: type=1400 audit(1767992357.197:426): avc: denied { write } for pid=3638 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.487310][ T29] audit: type=1400 audit(1767992357.281:427): avc: denied { listen } for pid=3665 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.544279][ T29] audit: type=1400 audit(1767992357.334:428): avc: denied { create } for pid=3669 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.611532][ T29] audit: type=1400 audit(1767992357.365:429): avc: denied { connect } for pid=3669 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.631075][ T29] audit: type=1400 audit(1767992357.365:430): avc: denied { write } for pid=3669 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.631202][ T3675] __nla_validate_parse: 2 callbacks suppressed [ 43.631242][ T3675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.40'. [ 43.719817][ T3676] netlink: 'syz.3.40': attribute type 4 has an invalid length. [ 43.796521][ T29] audit: type=1400 audit(1767992357.544:431): avc: denied { ioctl } for pid=3662 comm="syz.4.38" path="socket:[5242]" dev="sockfs" ino=5242 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.844903][ T3679] loop0: detected capacity change from 0 to 512 [ 43.855205][ T3679] EXT4-fs: Ignoring removed nobh option [ 43.866881][ T3683] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 43.872606][ T29] audit: type=1400 audit(1767992357.638:432): avc: denied { mount } for pid=3678 comm="syz.0.41" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 43.873491][ T3683] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 43.895681][ T29] audit: type=1400 audit(1767992357.638:433): avc: denied { write } for pid=3678 comm="syz.0.41" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.904277][ T3683] vhci_hcd vhci_hcd.0: Device attached [ 43.925857][ T29] audit: type=1400 audit(1767992357.659:434): avc: denied { mounton } for pid=3678 comm="syz.0.41" path="/7/file0" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 43.981004][ T3679] EXT4-fs (loop0): orphan cleanup on readonly fs [ 43.987987][ T3679] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.005325][ T3679] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.41: corrupted inode contents [ 44.017279][ T3679] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.41: mark_inode_dirty error [ 44.030777][ T3679] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.41: corrupted inode contents [ 44.043737][ T3679] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.41: mark_inode_dirty error [ 44.056202][ T3679] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.41: mark inode dirty (error -117) [ 44.073157][ T3679] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 44.092195][ T3679] EXT4-fs (loop0): 1 orphan inode deleted [ 44.098353][ T3679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 44.117966][ T3590] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 44.130640][ T3679] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.175708][ T3590] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 44.211619][ T29] audit: type=1400 audit(1767992358.037:435): avc: denied { perfmon } for pid=3689 comm="syz.2.43" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.232422][ T3684] vhci_hcd: connection reset by peer [ 44.238224][ T53] vhci_hcd vhci_hcd.4: stop threads [ 44.238902][ C1] hrtimer: interrupt took 54232 ns [ 44.243696][ T53] vhci_hcd vhci_hcd.4: release socket [ 44.254458][ T53] vhci_hcd vhci_hcd.4: disconnect device [ 44.260436][ T3690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 44.361007][ T3692] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 44.384921][ T3693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.43'. [ 44.499858][ T3699] loop3: detected capacity change from 0 to 164 [ 44.547617][ T3694] loop2: detected capacity change from 0 to 8192 [ 44.579888][ T3699] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.598478][ T3699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 44.609956][ T3699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 44.627237][ T3699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 44.646424][ T3699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 44.657225][ T3694] loop2: p1 p2 p4 < > [ 44.661384][ T3694] loop2: partition table partially beyond EOD, truncated [ 44.708577][ T3694] loop2: p1 start 16777216 is beyond EOD, truncated [ 44.715449][ T3694] loop2: p2 size 515840 extends beyond EOD, truncated [ 44.766692][ T3694] loop2: p4 start 16777216 is beyond EOD, truncated [ 44.823190][ T3700] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.911767][ T3705] loop1: detected capacity change from 0 to 512 [ 44.933320][ T3700] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.970105][ T3705] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 45.016906][ T3700] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.028164][ T3705] EXT4-fs (loop1): 1 truncate cleaned up [ 45.046802][ T3705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.071850][ T3713] netlink: 56 bytes leftover after parsing attributes in process `syz.4.48'. [ 45.133803][ T3700] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.165372][ T3705] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.46: Logical block already allocated [ 45.196204][ T3705] EXT4-fs (loop1): Remounting filesystem read-only [ 45.211471][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.238664][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.261083][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.328114][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.345690][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.394765][ T3722] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.414180][ T3722] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 45.426518][ T3730] loop4: detected capacity change from 0 to 1024 [ 45.435281][ T3731] netlink: 44 bytes leftover after parsing attributes in process `syz.1.50'. [ 45.448340][ T3730] EXT4-fs: inline encryption not supported [ 45.463904][ T3731] sd 0:0:1:0: device reset [ 45.471402][ T3728] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3728 comm=syz.2.53 [ 45.486201][ T3730] EXT4-fs: Ignoring removed nobh option [ 45.491926][ T3730] EXT4-fs: Ignoring removed bh option [ 45.503081][ T3722] loop3: detected capacity change from 0 to 4096 [ 45.515840][ T3722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.523609][ T3728] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3728 comm=syz.2.53 [ 45.550719][ T3722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.564328][ T3730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.773564][ T3733] loop0: detected capacity change from 0 to 512 [ 45.795398][ T3733] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.56: bad orphan inode 11862016 [ 45.813825][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.814944][ T3733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 45.835405][ T3733] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.860647][ T3733] cgroup2: Unknown parameter 'memory_hugZ¯ ‡@† iüF£T…ÆäÞetlb_acco~nting' [ 45.877066][ T3748] netlink: 'syz.4.58': attribute type 13 has an invalid length. [ 45.942149][ T3748] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.949580][ T3748] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.019372][ T3748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.030528][ T3748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.070925][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.114027][ T1707] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.123689][ T1707] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.153837][ T1707] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.173763][ T1707] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.752769][ T3733] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 46.780275][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 47.051309][ T3782] loop2: detected capacity change from 0 to 512 [ 47.058427][ T3782] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.068926][ T3782] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.077684][ T3782] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.102152][ T3782] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.62: Allocating blocks 41-42 which overlap fs metadata [ 47.116596][ T3782] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.62: Allocating blocks 41-42 which overlap fs metadata [ 47.131298][ T3782] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.62: Failed to acquire dquot type 1 [ 47.143247][ T3782] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 47.157836][ T3782] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.62: corrupted inode contents [ 47.171501][ T3782] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.62: mark_inode_dirty error [ 47.183285][ T3782] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.62: corrupted inode contents [ 47.195977][ T3782] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.62: mark_inode_dirty error [ 47.207809][ T3782] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.62: corrupted inode contents [ 47.220736][ T3782] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 47.230626][ T3782] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.62: corrupted inode contents [ 47.243033][ T3782] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.62: mark_inode_dirty error [ 47.254557][ T3782] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 47.265010][ T3782] EXT4-fs (loop2): 1 truncate cleaned up [ 47.271861][ T3782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.349125][ T3780] netlink: 'syz.3.64': attribute type 13 has an invalid length. [ 47.493757][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.517758][ T3780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 47.582522][ T3795] loop2: detected capacity change from 0 to 512 [ 47.590892][ T3793] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 47.612801][ T3795] EXT4-fs: Ignoring removed orlov option [ 47.618587][ T3795] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.633395][ T3795] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.67: corrupted in-inode xattr: e_value size too large [ 47.717960][ T3795] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.67: couldn't read orphan inode 15 (err -117) [ 47.732870][ T3797] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.742969][ T3795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.756869][ T3797] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.68: Allocating blocks 41-42 which overlap fs metadata [ 47.772868][ T3797] EXT4-fs (loop3): Remounting filesystem read-only [ 47.779724][ T3797] EXT4-fs (loop3): 1 truncate cleaned up [ 47.803206][ T3797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.891072][ T3806] EXT4-fs: inline encryption not supported [ 47.897151][ T3806] EXT4-fs: Ignoring removed nobh option [ 47.902842][ T3806] EXT4-fs: Ignoring removed bh option [ 47.942420][ T3806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.052167][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.056403][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.091898][ T3815] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.108471][ T3815] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 48.111384][ T3813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.153101][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.163100][ T3816] set_capacity_and_notify: 2 callbacks suppressed [ 48.163116][ T3816] loop2: detected capacity change from 0 to 512 [ 48.186782][ T3816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.200559][ T3813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.226034][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 48.226050][ T29] audit: type=1400 audit(1767992362.258:626): avc: denied { kexec_image_load } for pid=3814 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 48.262372][ T3816] EXT4-fs (loop2): too many log groups per flexible block group [ 48.277140][ T3816] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 48.284222][ T3815] loop3: detected capacity change from 0 to 1024 [ 48.292206][ T3815] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.303613][ T3815] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 48.304973][ T3813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.312753][ T3815] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.329364][ T3815] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.71: Invalid inode table block 0 in block_group 0 [ 48.342235][ T3816] EXT4-fs (loop2): mount failed [ 48.342247][ T3815] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 48.342455][ T3815] EXT4-fs error (device loop3): ext4_quota_write:7375: inode #3: comm syz.3.71: mark_inode_dirty error [ 48.368175][ T3815] Quota error (device loop3): write_blk: dquota write failed [ 48.375597][ T3815] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 48.385575][ T3815] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.71: Failed to acquire dquot type 0 [ 48.397274][ T3815] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.71: Invalid inode table block 0 in block_group 0 [ 48.409929][ T3815] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 48.419790][ T3815] EXT4-fs error (device loop3): ext4_ext_truncate:4475: inode #15: comm syz.3.71: mark_inode_dirty error [ 48.421229][ T29] audit: type=1400 audit(1767992362.457:627): avc: denied { name_bind } for pid=3818 comm="syz.0.72" path="socket:[6568]" dev="sockfs" ino=6568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 48.455442][ T3815] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.71: Invalid inode table block 0 in block_group 0 [ 48.469258][ T3815] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 48.481480][ T3813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.488792][ T3816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.509234][ T3815] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 48.518592][ T3816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.533869][ T3815] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.71: Invalid inode table block 0 in block_group 0 [ 48.544803][ T29] audit: type=1400 audit(1767992362.531:628): avc: denied { read write } for pid=3812 comm="syz.2.70" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.569663][ T29] audit: type=1400 audit(1767992362.531:629): avc: denied { open } for pid=3812 comm="syz.2.70" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.593059][ T3815] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 48.593156][ T3815] EXT4-fs error (device loop3): ext4_truncate:4635: inode #15: comm syz.3.71: mark_inode_dirty error [ 48.593610][ T3815] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 48.603253][ T29] audit: type=1400 audit(1767992362.531:630): avc: denied { ioctl } for pid=3812 comm="syz.2.70" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.616052][ T3815] EXT4-fs (loop3): 1 truncate cleaned up [ 48.639293][ T3831] loop1: detected capacity change from 0 to 512 [ 48.652655][ T3815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.659908][ T3831] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.681495][ T29] audit: type=1400 audit(1767992362.678:631): avc: denied { mounton } for pid=3829 comm="syz.1.74" path="/14/file0" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.703609][ T3833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3833 comm=syz.4.73 [ 48.704205][ T3833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3833 comm=syz.4.73 [ 48.742260][ T1685] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.754292][ T3831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.774936][ T3831] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.786986][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.801390][ T3838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.810592][ T29] audit: type=1326 audit(1767992362.867:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb210ef749 code=0x7ffc0000 [ 48.833941][ T3838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.837683][ T98] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.852067][ T29] audit: type=1326 audit(1767992362.867:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb210ef749 code=0x7ffc0000 [ 48.897352][ T2321] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.908647][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.925287][ T2321] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.975451][ T3590] usb 9-1: enqueue for inactive port 0 [ 48.980975][ T3590] usb 9-1: enqueue for inactive port 0 [ 48.987153][ T3846] netlink: 'syz.4.75': attribute type 13 has an invalid length. [ 49.000431][ T3847] loop1: detected capacity change from 0 to 512 [ 49.011194][ T3847] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.039276][ T3847] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.77: Allocating blocks 41-42 which overlap fs metadata [ 49.053146][ T3590] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 49.065691][ T3847] EXT4-fs (loop1): Remounting filesystem read-only [ 49.072451][ T3847] EXT4-fs (loop1): 1 truncate cleaned up [ 49.078637][ T3847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.420359][ T3855] loop0: detected capacity change from 0 to 512 [ 49.427530][ T3855] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.435707][ T3855] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.444501][ T3855] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.464224][ T3855] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.78: Allocating blocks 41-42 which overlap fs metadata [ 49.478658][ T3855] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.78: Allocating blocks 41-42 which overlap fs metadata [ 49.493934][ T3855] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.78: Failed to acquire dquot type 1 [ 49.505727][ T3855] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 49.520215][ T3855] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.78: corrupted inode contents [ 49.532926][ T3855] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.78: mark_inode_dirty error [ 49.544763][ T3855] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.78: corrupted inode contents [ 49.558024][ T3855] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.78: mark_inode_dirty error [ 49.569610][ T3855] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.78: corrupted inode contents [ 49.585758][ T3855] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 49.595175][ T3855] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.78: corrupted inode contents [ 49.607370][ T3855] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.78: mark_inode_dirty error [ 49.619151][ T3855] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 49.629135][ T3855] EXT4-fs (loop0): 1 truncate cleaned up [ 49.636082][ T3855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.765658][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.839673][ T3864] netlink: 44 bytes leftover after parsing attributes in process `syz.3.80'. [ 49.849909][ T3864] sd 0:0:1:0: device reset [ 49.976340][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.137281][ T3875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.157546][ T3880] loop2: detected capacity change from 0 to 1024 [ 50.162278][ T3875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.164917][ T3880] EXT4-fs: inline encryption not supported [ 50.177972][ T3880] EXT4-fs: Ignoring removed nobh option [ 50.183558][ T3880] EXT4-fs: Ignoring removed bh option [ 50.197244][ T3880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.250655][ T3885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.83'. [ 50.321994][ T3887] netlink: 'syz.4.85': attribute type 13 has an invalid length. [ 50.353432][ T3878] infiniband syz!: set active [ 50.358302][ T3878] infiniband syz!: added team_slave_0 [ 50.383697][ T3878] RDS/IB: syz!: added [ 50.405144][ T3878] smc: adding ib device syz! with port count 1 [ 50.433998][ T3878] smc: ib device syz! port 1 has no pnetid [ 50.442926][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.933012][ T3894] ================================================================== [ 50.941157][ T3894] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 50.948913][ T3894] [ 50.951262][ T3894] write to 0xffff888237c26468 of 1 bytes by task 3895 on cpu 0: [ 50.953845][ T3893] netlink: 'syz.2.86': attribute type 3 has an invalid length. [ 50.958911][ T3894] folios_put_refs+0x285/0x2d0 [ 50.958966][ T3894] folio_batch_move_lru+0x24b/0x280 [ 50.958997][ T3894] folio_add_lru+0x14a/0x1f0 [ 50.981096][ T3894] folio_add_lru_vma+0x49/0x70 [ 50.985870][ T3894] do_wp_page+0x1550/0x2510 [ 50.990399][ T3894] handle_mm_fault+0x7b0/0x2c60 [ 50.995271][ T3894] do_user_addr_fault+0x630/0x1080 [ 51.000399][ T3894] exc_page_fault+0x62/0xa0 [ 51.004927][ T3894] asm_exc_page_fault+0x26/0x30 [ 51.009815][ T3894] [ 51.012158][ T3894] read to 0xffff888237c26468 of 1 bytes by task 3894 on cpu 1: [ 51.019705][ T3894] __lru_add_drain_all+0x17e/0x450 [ 51.024860][ T3894] lru_cache_disable+0x1f/0x30 [ 51.029640][ T3894] do_migrate_pages+0x3a/0x5c0 [ 51.034422][ T3894] __se_sys_migrate_pages+0x2bc/0x320 [ 51.039912][ T3894] __x64_sys_migrate_pages+0x55/0x70 [ 51.045306][ T3894] x64_sys_call+0x1cb1/0x3000 [ 51.049999][ T3894] do_syscall_64+0xca/0x2b0 [ 51.054534][ T3894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.060436][ T3894] [ 51.062769][ T3894] value changed: 0x13 -> 0x00 [ 51.067442][ T3894] [ 51.069775][ T3894] Reported by Kernel Concurrency Sanitizer on: [ 51.075968][ T3894] CPU: 1 UID: 0 PID: 3894 Comm: syz.3.88 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.085528][ T3894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.095592][ T3894] ================================================================== [ 51.116792][ T3901] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 51.128791][ T3902] netlink: 'syz.1.89': attribute type 1 has an invalid length.