last executing test programs: 40.941351688s ago: executing program 4 (id=71): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000066ab253b1c35541f1163de0fa516762539bd45cf57724e687111054c52423dc9616feb5ca58bb03f7e5ed2d565560cff6c145549826118c113", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000001000003000000000000000000181100a3", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x12062, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x15bd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000a600000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000000000007be011e3ed63ca9dfc913c9e"], &(0x7f0000000080)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000680)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000340), &(0x7f00000008c0)=r6}, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r7}, 0x10) rt_sigtimedwait(0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000300)='GPL\x00', 0x7, 0xd, &(0x7f00000002c0)=""/13, 0x40f00, 0x3d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) readv(r9, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) 40.082755289s ago: executing program 4 (id=80): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) read(r0, 0x0, 0x0) close(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r4, 0x5423, 0x0) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x281, 0x0, 0x12, 0x14, 0x20, "95ad4489a25673b5a955f5f736ef1f1c033d36c0ee69107626f72875ceb9332cb79ea25534348f613b34a61a895ec716fbdbbfe992a25b1f2a25f36b0fad5d99", "4a1982d41c7c4e8f704adce76f19e1f6b54de1571daea73904d4af73e6f9d403919e5f74b51629df746181d1ffbfcd1d5b56e8615f129d343b1aec97cbd8d551", "1b5a0325815abc1c406400", [0x0, 0x7]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) 38.897181269s ago: executing program 4 (id=85): syz_read_part_table(0x105f, &(0x7f0000000000)="$eJzsz7FNAzEABdDv893BVUyAxAp07EDNNkhw67ACJR2TwA6RHFmxMkKS4r3G/vpfshyuaitJ6vxSRp7PzWsvcr9smZL8fP/O5TNZ20dKu0uyjN3+vyTtoaaOnGQqf4+ndGh7G8OStR9P/ann936tb18X+ygAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3LBjAAAA//9VOA9w") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{}, 0x0, &(0x7f00000013c0)}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r0, 0x0, 0xf}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000063110800000000008510000002000000850000000500000095000000000000009500a50500000000ab46e77dfa08d5a5ed5007e537903330f1afe4"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x82, 0x0) syz_open_pts(r4, 0x141601) 35.313473701s ago: executing program 4 (id=102): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a000000"], &(0x7f0000000000)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) pause() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, 0x0, &(0x7f0000000340)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) set_robust_list(&(0x7f0000000140)={0x0, 0x401}, 0x18) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r7, 0x409, 0xb) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r8, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000001, 0x12, r9, 0x100000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x62040200) socket(0x2, 0x3, 0xff) 34.056694535s ago: executing program 4 (id=110): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) sendto(r1, &(0x7f0000000800)="a9450a4aa804780f5d888267c8ba7577312441f75765a32d6d6af373386adc2b9679350923c787a9c7c0c8ebf6140a7155163b2edcccb96decd4852a8bd13a79643bd18422d4f5b18c370c07f12974a056d0e6a80e417fce6249572ac3cc0e97c3ed212e5999ff3a24242d373e12875313aba01c311cce980f342f74cfb208da15846b9a323cae26fe5317a35879f9c36bf604f3abe5197b888c1f5e449146492aa7b56e7f408680c6a9a9b026498411c8d2191e715bf4c05f152c571b79aa1e4c7d01e0950c4e3c97b14a16823644e99809150cd23b06da043a58a495af54d23c92456642e8b84069a56ceb6218f9fb5e3142b694bd918df32fc5040e265ddcd21a6e33ef017a5a82f3a040fa0210a1a8f92b21406cd243fe1d4276cb1925ae2d969b56ebb052191c7c0a9a8a7d63f315f83c2b728b38fe41716ceb5aa5739fc522dbf4d4e16d8251f885f7653c8393420f480b7639671866befcbb47450dd63f15d9851052b929a0b6df5c3adbe724e35f5a6f3a34c17785fbf6a8b9befd475ad106259de55de83275185bd4deb94fe2a664857189bcd7ab53921b5d59b880a5b68d50d49629e22c09248261d37f7d22ecaa184c8d23880fb81206a830a0a193d455af570a5e786248b8e6f343334420654b93a71e997c2f1008cb074f8a126f4070de38721fb9fc6394e2c152119bd5dac83f7618315fb4d45523b2b80b2df549bb2cd334005c5e792a149120f8fee0e239a68c738f56189396ba75e9e6907f8a086e5fa807b604e566884645f3ea903b3f2436bfcb03572651a94df4d69b7989f79c8d4d846bf58385d6963b3290c394a453f701080d0078f8b26377cb2dd84d5af00fef48c4a1e926c576bdbc3efa810d31ebb3802794942918c617067d9e19687e36c1de89384ee6edbdc430525d95ffe3f2575349bdb79fa32d0e571e8ab32a8659663a480fb85a8444d1f90f518b5f9b9154658c2c8433e84e706a426a441a03b14cc748ad3df050192f83b44d34f187cc26a36ead91bd8899fc1e48c98bff7dd0554498cf47b460450113f60974341cc451eda8451bc2d873079c3c428a48487ffd99f7085d847b6d37c9d4000e672c87c7f55f718bd1458e3b3f457be1c3cfb3dab0260763aa19f1bad37e999597daa965830cf15d8afb389b172f7dd6a2810cee0034a8c311b3c146f034ccbc408c591eda779bbb8794fcf41805aa31c89454715b8b01a0b8f2b573197326046e9b5ce23247e1e45ff2df9b6ce9d596d8f8e13dcd9ca49e2fb495290a1c76da44db0a6fc020faa53a40923163f575398ad4c45fdaa44242ae05e0b1a29a2ed3bfa1bfc07fa1070c74a2c952a839252b116fee4b7e06420be06ec336944ea1c5b3553873c44d43a4e5aa0f1777de86545a8f6d290fd5e3c5ed9166534b00ef2d1071068c2df0eb626211b9fe82b8ad96c508b3ed341ab1699d23acf284bf28eda395d6a386a9b01a642cac0ed95ca855bebf37e64057a82a72c589c2805faac7756aed4d57e037102eb1687bcd42bf0a74cf4dc91f7f6f853f4b4e4936ed094516189a3e4eb409fde7c46ccd74e57d88e813c1597b39f1c5d019b5f5f3f8e8e4d85408e3c8741e985b2edc9b0499fd2f72ce436499372c486da637d285fd2414bb0fb7ad4025c2f5487da96cc584a66d76d2288edab6a3807bd07cc5c1278a198c81d6cd6ddb1c3af5117dabde7ae788c3ce910885208a2ed1ea5f8590a3ba325dfc226e73129a6c24a785c9b333670a43e91717fcfd9b2a91a36e3f69d57386374ce6c073cc8c83691ba0bd72d6b419b469d741d53ca945e6a7e3b20dd3440c32575d187a609ee552ec941634ef0343f155e19eec33e6a06b7e5c2fc2269199dd8ae5da54ede966b20cc1a70b49eaa94545c032e52627eb7074b37b72d6b7f32638213b72649b315db253eb867977528e9515343556128e7854fc35a175f4e5b570dab6b9ecc5c20b5f54f43a6fd9abb38b2eb80acfd8c8b14ce8b01a9d2f950a1c34c6708a94b643a5414f0103d3c696c7feb8e1e8e9d4a909c499a19240e6fad0f1030675712b1478c494ca6c5952ade1f332586e7bd52dab85961f057f562420b1c3506705ea20b185cb6f6639932a3e3af00a17b1ca21bad190e62a0eabe54d58d737f6a2d66b24d4d235de0efe5afcacc164b60e3a8949cc4258a0a973bb742a57e2dc481ee7b0fa8bec32ff557b20a2db1ebc6c7f5315222964d6b4b69929c8a5eb2fd7cc4a7a95d30e497beb284ab4f4af38b3d7f7185f0ca8fa77fb1a4cd1ed23d0888afd297235331f6d7cfcd926565624ce39550aa4d7aaae661be764399cdee57176ba2463d5924acbb2a4ec561a0e611637879521d454e4364e16a1d9859942e0067a19c8b6f3daa7a36557e65346e010d30292ee783c0b48e9df31064c6cebe6d09915d6387f1e1a28f9bb296c3df83b4144c96db78db25031a7b5c5bba67607d7030a4689301d34f12467844afb7caf729158830bc8937af4a2e2eb7a15cd0df947ca2796148c98857e0edc338ddb761ea6e7ea95f9c0f89b7f30c9199c81f0044c06f4abbd3f296c424c7db0786d0a1a0847358b2ea7645c519e8e15eeb9299026d8dfd65ccce0f8a0b041c4a387596970b9baffa981cfb2370f0a28c03cbc1cf298d6d1e25c142b65f28da629cc166f32e1dc8008772ba0d35af2a0b6f4092025e920d9c7adf25770c90225cfc486dcf5175425fc24e4a83d8ac7ab08f8c8c943483c2d1e3f8e7b93d6d3beacc02e507b2d953a8caacdcddb879358b7e1126d86557d75f1b45ed77ff5653ba27f795e25954b78ad7404d099d471e35802ba46a199bea726665e04bdd56ecf8b7e3fb823ecba61265fb23f0e582ef5d58f33f317d3a8850e9c5a10bca09acd63fea1b6030b64c829557392556f12e3a8fe068b976a7cb5025213a67d7363218818571eafd19c13b03c954d8df310cd177d582bcb8e12a4f1683a8f9b8b8e992d9f844a4bf768c5016a77c646f98778ba455dc48e448bf0deb87f29afe4d16fdecf774565beda2e728bd0cfa08f4a708371eafd1f2c6cc9b307cda7c07635115d23735c35481285af7b638c81386fee55a791d1578beb626f770f0df3f17e76e4bbcfc0e1a355e428953aa9c765c3f68f354b2c7aed62c85afa26caa702dde97d851a67772a2d272457cf453bb991432114f63483886adec27926a8bdefef7f446f3a42dbc36e138c5db574a5965b08116b85bad2eba3ad3bce021797f4ab75d5e5633685064be59157863a41c2ec07b849cf3accda44e4e7437e6c4d7fdb4fdbe3404b55042209685284ba5c422f09988fef5b28f65bcc31e52dbab5113d0b4ac6efe9844f9adb386b5ddc718706a3663a99cb15728e7d5299eff5d5222c1553316404ac78da84b0d753ff5a78fe6df1ced4c34b5a69976e9bf8121b1d3fc2de8e8bf34455b79b7017641e454f8c24ca87b49a35151f6f519073043cc2fc1276ae11018a128a94e43e2a461cfd193fb3a0d8c158b87437413cc09f9b550cecc3a5a47d0d576e6b40869af92499a394de86a540519803f4d416ae400f3edf6108a7f1eb4bd8ae6602a6216333849bf7770d397d8b18f08c521ad8494a795508c93fbc00e867263057099bde9f2a4d6356e753e98b027b3c99ef2e062fa7fe8f8632a8f5d01752f258eb141741be623451962ae2e514ac4870c6574190cb11bb88d8481248e357812be3253c13e407129a7dba06bc2cd4a978937c197c0c546aa208f09cd7793ab7d2c52b4465e706d5145abdfb6e292edcd6c37ed073bd9a868649ed8395e86e1ad304e985052bea574036ba578257f9a804aaa7ffaad4e9b9c34fd1ff919eda21d9c956bafdc43ab758d3739f451502694c6468d92aee6df70f2ae53e7f32e6e6c3110c612fe6c68f5eaea2c4aa7a2021730d2d5b6f5aaa01b751e3db89641eb36f38a32f787e2d340999794876373a1dde11b41455b1fb7fb347cd1a20e0fc18218dc3a0ae0e6fe43d146b37ee4b30802a7ed343e07c14cae8714fcb13b82a9f9369356abfc1eb1fa37c662b7d3af6156b7e94d107303ea6a48bd905a5532738a5263afdd8ebd323270e931afeeb91934f2efbbc30bf59ddf8fdb33f0d07116600fecdbddc69130db47143bc761b5d21fb503278c34036e1b955a612009133962f5a7ddb12a3c7331675a4157af0b49f0001be9e974337341e2f1f3ea61c33321461861986b17850f35d1be672201b2dbac8bf2cdc2ad98ee9bcd71f18209ab240a064c352295b5fc6e3ee3199e9c95482bc23287e6ea8a41deaa2e71962169039d72c73abfb7e75886beb18f0a9d37043e33ddff27591a3e21a9b035b01cb1f5c0958d1126ef1ae208c0825d295183d54e22c5ff6bbfa3289e292798e5cb77007c577f8dc8310f2518eb2a06317adffb642aa44a99e22f4c79468b1042ca1f8bb8ce2c756a228b6b4dd09641e95df7a537e6f85762ef49d63e40f7b81241be89ceb0c9ae67e22b0c44be73f428843ab552f05fd65daf89a405c6613d4c80eb50d0f68733725758878e3378b26addaa45c869c0da7245e500c5e88ecf9d272e083253dd1829f56d1b2d836dc6b7ac5abc5907a0325db1b1a58e4f9f260acd7eef2e50d2413e3ffede9a6b8464947fc7076bf71d880edafe1a8b367831907049d586b41285469c5e9dad741243e130b1a3ae0d6d74894b542c4596b7db7cbcaad3a9a9d3aa32d2de97756bae1195d6a1884c4e283bf806601d905ca8857b97bdc4f61435b45bc4a59e12ca63df3ae7d2a7e3420e7528684c74435693b0582ca1d38597223c3d6d22b8d40dddfe83f4a800a70a137795122dcfd81f82a451aad0107171f1e93e51231b1cf1bfdc7b1a546666f2fed17fb480b221416fbf86c27d7158a9ac4bf50f99c17a688e44ecbdd7934a1e16fa375cc191351e9dcde4ee680ca978475f97b48865e9f7987d88a65c20f7ee16e90dc7c4ecf661743e37de0c6aa934e566c39e9d08c9ca16f0ebeced33e245ed1654ac4b8428fb8b9d87cdd2ccbf39a847b4820c6574cc9e174cea7049e1709d96c8b9ee418fa16e74171451f7bc1f95d89c0e4a89fdf40dd9ed2f88475f9c67a657dbb17a64f76d301b310abb8e88735ac1adf2de5c7376371210efd987289c2caee6068438313bf9f093fb602aba8cce2d0fc0d33304e5ae5d8f30e0175386498557ab546294438e0b45ea7896341b4a66b00426806a6cbbf5e5802e4347615d98e189c134448a95a7e22ac0bde670b7027ed9a99d4b47a12a56bde19bfcf4463e245c1317f578c11efc4990617693711cc2c80f61db60772bec83afe3a1cfaa4ed18ab6a6e1bfaabf37301ae1b19c8ecb38c4099b6a55acc272836f6af90b33065d3292cf2b076381c74dbe3a69795f6dad23c9b7a1bdf67b22039b2680141a8d9992d25e039c2b3e7ae2b2adce98c78c25c50bc4fd68162071d0ab0f5c41e38a5db3d8d98d2a18976c0ea6a831eda5d646ba5bd5f96bf1afe24866a2ac008225cfc88e04c4b506b76be6769da9bdd2b90d73b3f85a752d2aa247a97d883f1609713c0679eae0525af852da89fb0dc91c63ef10b000a5d964bcce26c6be600350c6cd948328efe843b3aa8642790bcd124e7fac8ba813c58d8a8a1e12cc5ba92f5ef31cf0310bafcddc2a4378be2921a360dd3020e5e40cb5c6fce09a84ee28933a82901ef47fb2220c0cf511e58afe0b61fc97a856ce2ac513ad970dd0830c335beae54afb29dc6f3fe3ec091744f042a01eacfb5", 0xff8, 0x4, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400, 0x17b759, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x18a1, 0x3fd, 0x200, 0x8, 0x4, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2800004, 0x28011, r5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x40080) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000200)=0x10) r8 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x2, &(0x7f0000000000), 0x8) io_submit(0x0, 0x7, &(0x7f0000001a40)=[0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x1, r6, &(0x7f0000000400), 0x0, 0x6, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000480)="b27d962b4aa15a8aa541fdd3342da6a65d4b5ef75fb827505580205d31dc597c465615ea7148340e6ce2a7", 0x2b, 0x8000, 0x0, 0x2, r7}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x416f, r0, &(0x7f0000000700), 0x0, 0xb68, 0x0, 0x3}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x7, r1, &(0x7f0000001800)="61340168195b559b3008099ed2465dab882f67ba4a7ff26c09706bd350c17b1cf6f43c4d899dea6eb383a9a23196c344a5de77cde9a8851bdaa41b7425efa659c154d87358c4b875451fed84af311d1ccc89f954b9ee771036febe8c3b0afc5cf1837d6057bdba65f8377296e37bbd26d0ee696da2b73fc9f6de5b58bbbbfc59874d4d4b6e6815a354f6a76d", 0x8c, 0x7f, 0x0, 0x0, r2}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f00000018c0), 0x0, 0xffffffffffffff00, 0x0, 0x1}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x6, 0x7, r4, &(0x7f0000001940)="b41e461beef3c212dcc1a03265458135ed64936f16f1551a7095305d5828bfb10cb20a6ed5378965cd58144d3a6cc36b9ff24a53f6f21e9bbabb6756b22283c5b222ee7cfffd140b0e53dfe1bc678e2492a87b1f2e44d72aa99d4312820cd2ddfddd339630e789a332f6a432011d141494d56f4356f60afb24000f902cb9039d23a0563e9a00d3493c19614db9558ffe80d67263b0810da997102c9d29443d40aefe60e57d772fa5876dc4", 0xab, 0x8, 0x0, 0x1, r2}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) 33.930141583s ago: executing program 4 (id=111): openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0xd, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x2, 0x1, 0x40}]}]}, {0x0, [0x30, 0x5f, 0x5f]}}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "886d8172a0bb4a4355abd25c841f2a1365dae42ffaf91e2cdd504093ad0b55b459af7e4d8fc3861acdaf94a55ccd3f0ef6ba59bb94960277facd6a2729396ba39f83a69aa9985d0e408c88306cd0bbe97251454ab8e161127d1cde92bfdc702187e1d500588637a5e230614303bb5a19b147aba649769d72a2456d28db3bdec7801c23b9ca3af17261f5d0a2f07a899403c20c1fb74d240c2e12e109370735f34cf87bb804f5c38919b27fb4df37"}, 0xaf61a3) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x6210, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4b, 0xa, 0x0, 0x0, 0x0, 0x20, 0x40a40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x45ff5eb5c5b47e72, 0x3, 0x7, 0x7, 0x4000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0) futex(0x0, 0x80, 0x0, 0x0, 0x0, 0x1) set_mempolicy_home_node(&(0x7f0000217000/0x3000)=nil, 0x3000, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000ac0), &(0x7f0000000080)='./file1\x00', 0x10000, 0x0, 0x0, 0x0, &(0x7f00000000c0)) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0xa008, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) 18.735849662s ago: executing program 32 (id=111): openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0xd, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x2, 0x1, 0x40}]}]}, {0x0, [0x30, 0x5f, 0x5f]}}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC6J37x6L/4B/RUELRUrQg5eV2cym22Y32aSbJu1+PjDJezOzee+7M9+XNzu7bAB9ayz7UYh4NSK+TSJGWrYNRr5xbHW/lYfXp7MliXr9s7+TSPJ1zf2T/PehvPJKRPz+dcTJwvp2q0vLc6VyOV3I6+O1+Svj1aXlU5fmS7PpbHp5cmrqzDtTk++/927PYn3z/L8/fHr3ozPfHF/5/tf7R24ncTYO59ta43gKN1orYzGWPydDcfaJHSd60Nhekux2B9iWgTzPhyIbA0ZiIM/6tuojz7JrwA77KktroE8l8h/6VHMe0Ly279F18HPjwYerF0Dr4x9cfW0khhvXRgdXkseujLLr3dEetJ+18dtfd25nS/TudQiATd24GRGnBwfXj39JPv5t3+ku9nmyDeMfPDt3s/nPW+3mP4W1+U+0mf8capO727F5/hfu96CZjrL53wdt579rN61GB/LaS40531By8VI5zca2lyPiRAztz+ob3M/5orByr95pY+v8L1uy9ptzwbwf9wf3P/6YmVKt9FRBt3hwM+K1tvPfZO34J22Of/Z8nO+yjWPpndc7bds8/p1V/znijbbH/9EdrWTj+5PjjfNhvHlWrPfPrWN/dGp/t+PPjv/BjeMfTVrv11a33sZPw/+lnbZt9/zfl3zeKO/L110r1WoLExH7kk/Wr5989Nhmvbl/Fv+J4xuPf+3O/wNZYncZ/62jt1p3Hd5a/Dsri39mS8d/64V7H3/5Y6f2uzv+bzdKJ/I13Yx/3XbwaZ47AAAAAAAA2GsKEXE4kkJxrVwoFIur7+84GgcL5Uq1dvJiZfHyTDQ+KzsaQ4Xmne6RlvdDTOTvh23WJ5+oT0XEkYj4buBAo16crpRndjt4AAAAAAAAAAAAAAAAAAAA2CMORQy3+/x/5s+B3e4dsOM2+Mpv4AXXOf/zLb34pidgT/L/H/qX/If+Jf+hf8l/6F/yH/qX/If+Jf+hf20l/385t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPnsqW+8vD6dFafubq0OFe5emomrc4V5xeni9OVhSvF2UpltpwWpyvzm/29cqVyZWIyFq+N19Jqbby6tHxhvrJ4uXbh0nxpNr2QDj2TqAAAAAAAAAAAAAAAAAAAAOD5Ul1aniuVy+mCgsK2CoN7oxsKPS7s9sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/8HwAA///F1Dry") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "886d8172a0bb4a4355abd25c841f2a1365dae42ffaf91e2cdd504093ad0b55b459af7e4d8fc3861acdaf94a55ccd3f0ef6ba59bb94960277facd6a2729396ba39f83a69aa9985d0e408c88306cd0bbe97251454ab8e161127d1cde92bfdc702187e1d500588637a5e230614303bb5a19b147aba649769d72a2456d28db3bdec7801c23b9ca3af17261f5d0a2f07a899403c20c1fb74d240c2e12e109370735f34cf87bb804f5c38919b27fb4df37"}, 0xaf61a3) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x6210, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4b, 0xa, 0x0, 0x0, 0x0, 0x20, 0x40a40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x45ff5eb5c5b47e72, 0x3, 0x7, 0x7, 0x4000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0) futex(0x0, 0x80, 0x0, 0x0, 0x0, 0x1) set_mempolicy_home_node(&(0x7f0000217000/0x3000)=nil, 0x3000, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000ac0), &(0x7f0000000080)='./file1\x00', 0x10000, 0x0, 0x0, 0x0, &(0x7f00000000c0)) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0xa008, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) 6.051950662s ago: executing program 1 (id=291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x999f1259ee10210f, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f000048d000/0x1000)=nil, 0x1000, 0xb) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) setns(r0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='ext4_da_reserve_space\x00', r5, 0x0, 0xa8}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) 5.745473481s ago: executing program 1 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f00000003c0)=""/226) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x209, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x20, r5, 0x1, 0x70bd2a, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0xd0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r6, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x38}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0xa) sendmsg$AUDIT_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x201, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000) add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r10, 0x0) r11 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, r11, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 4.484691195s ago: executing program 1 (id=308): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pivot_root(&(0x7f0000000040)='./file1\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r6, 0x0, 0x0, 0x80000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x16, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, 0x625a, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000000c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 4.466218706s ago: executing program 5 (id=297): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000300)={0x0, 0x200000, 0x3000, 0x5, 0x3}, 0x20) r0 = io_uring_setup(0x1de0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x43}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_clone(0x2000, 0x0, 0x1d, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1b, 0x20000002, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000400)='itimer_state\x00', r2, 0x0, 0xc58}, 0x18) alarm(0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffffc8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000001000000000000000000000000ac1414bb00"/64, @ANYBLOB], 0x138}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) close(0xffffffffffffffff) preadv(r4, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00'}, 0x10) alarm(0x3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)}, 0x24000014) syz_emit_ethernet(0x11, &(0x7f0000000000)={@local, @random="424e1aa2e0d4", @void, {@x25={0x805, {0x0, 0x0, 0xb}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.573951869s ago: executing program 1 (id=304): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = socket(0x25, 0x801, 0x0) sendto$inet6(r0, &(0x7f0000000200)="91", 0x1, 0x40c4, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(r4) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) r9 = dup(r1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote}, &(0x7f00000002c0)=0xc) connect$packet(r9, &(0x7f0000000300)={0x11, 0x17, r10, 0x1, 0x10, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) close(r12) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYRESHEX=0x0], 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.55491988s ago: executing program 3 (id=305): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2216, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00800000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="010000", @ANYRES16=r3, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4005}, 0x24000000) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c4000000000080008"], 0x7c}}, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000080)=0x3) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x56, 0xfffe, 0x0, {0x0, 0x1}, {0x80, 0x2}, @const={0x0, {0x1000, 0x0, 0xfffc}}}) write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250) 3.548428751s ago: executing program 5 (id=306): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f00000019c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x1c, 0x0, @opaque="5fb31c3f9a6150adddabcd3899c9792cdd100477"}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) open(&(0x7f00000000c0)='./file0\x00', 0x2840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='defcontext=']) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 3.307463345s ago: executing program 1 (id=309): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) unshare(0x20000400) r1 = socket(0x1d, 0x2, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bind$can_j1939(r1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x15, 0x3, 0x0) write$P9_RLERRORu(r6, &(0x7f00000020c0)=ANY=[@ANYRES32=r6, @ANYRES16=r2, @ANYRESHEX=r1, @ANYRESOCT=r2], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="0800003e1c6f22", @ANYRESHEX=r6, @ANYBLOB=',version=9p2000.u']) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000002000)='mmap_lock_acquire_returned\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$eJzs3c9vFGUfAPDvTH/Svu/bQt6oeJAmxkCitLSAIcZEuBOCP26eKi0EKZTQGi2SWBK8mBgvHkw8eRD/CyXx6sGrBy+eDAkxhoMYImtmO1Om293SX7tbup9PMnSeme48z5R++5199nlmAuhYI9k/acT+iLiaRAyV9nVHvnNk6fvu/3njXLYkUam8/UcSNz5JFsvHSvKvg/mL/xmK5Oc0Yl/X6nrnFq5fmpyZmb6Wl8fmL18dm1u4fvji5ckL0xemr0y8OnHi+LHjJ8aPbOn8ylWfvvX+h0OfnXn3268fJuPf/XomiZPxKP+G7LxqX9u3pZqzn9lIVJY8KG/Pfq4ntnjsneKvoeL35LGkdgM7Vpr/Pv4vIp6Noegq/W8OxadvtrVxQFNVkihyFNBxkk3Ff//2NwRoseI6oHhvX+998Gppk69KgFa4d2qpA2Ap9nsiooj/7qW+weiPbOvA/WRFP08SEVvrmVuS1fHTj2duZUs06IcDmmPxZtHLXZv/k2psDkd/tTRwP10R/2lpyba/tcn6R2rK4h9aZ/FmRDyX5//e2FD8j5Ti/71N1i/+AQAAAAAAYPvcORURr9Qb/5cuj//prTP+ZzAiTm5D/U/+/C+9m68k21AdUHLvVMTrdcf/Lo/xHe7KS/+tjgfoSc5fnJk+ks8ZPBQ9fVl5vOa45RHChz/f91Wj+svj/7Ilq78YC5gf6W53zUTcqcn5ya2eNxBx72bE89XxvwfyLSvH/2T5P6mT/7P4vrrOOva9dPtso31Pjn+gWSrfRBysm/8fX24na9+fY6x6PTBWXBWs9sLHX3zfqH7xD+2T5f+BteO/Lynfr2duY8fvjYijC92VRvs3e/3fm7zTVRw/89Hk/Py18Yje5PTq7RMbazPsVkU8FPGSxf+hF9fu/1u+/i/F4Z6IWFxnnc88Gvyt0T75H9oni/+ptfP/8Mr8v/GVidvDPzSq/+y68v+xak4/lG/R/wdlq+/Hsd4AbUtzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOApl0bEfyJJR5fX03R0NGIwIv4fA+nM7Nz8y+dnP7gyle2rPv8/LZ70O7RUTorn/w+XyhM15aMRsTcivuzaUy2PnpudmWr3yQMAAAAAAAAAAAAAAAAAAMAOMVid81/pq53/n/m9q92tA5quO/8q3qHzdG/6lZW+bW0I0HKbj3/gabf++O9pajuA1msc/w8eVqpa2hyghVz/Q+faZPz7uAB2AfkfOtU6+/T6m90OoB3kfwAAAAAA2FX2HrjzSxIRi6/tqS6Z3nyfwf6wu6XtbgDQNsbwQufqnm13C4B28R4fSJbX/q472b/x6P+kOQ0CAAAAAAAAAAAAAFY5uN/8f+hUa8//N7YfdrM15v/XC363C4BdpPGjP+R+2O28xweelO3N/wcAAAAAAAAAAACAHaD/+qXJmZnpa3MLT9/KGzujGRtbWZzcEc3Y1pVHzTlyT0TsjBNs9UpxC442NqPNf5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl/wYAAP//SlcnIw==") futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500e1fd08005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) fsetxattr(r7, &(0x7f0000002040)=ANY=[@ANYBLOB], &(0x7f0000000300)='\\\x00', 0x2, 0x3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000001f80), 0x0, 0x4000) 3.149459724s ago: executing program 0 (id=311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000196c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030027009500000000000000d7f70e1c576e9f00591f0aa3544467b258fe787f00000000000000effc7dc47733b0ec9006d3ee38dc6a2f2c83eb58bc888982124bf9166934891c1fba7508fe0ec0265ff1ec64395b55e1fbccb63cfbb3b9a5928514e3a10fd557cbd13098b4742f80c5c98ebf14f4e3edcc57365c25df71a3663738ab032a79161770618ae0d7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x3) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000001c0)=[@sack_perm, @mss={0x2, 0x9}, @timestamp, @window={0x3, 0x800, 0x6}], 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x6, 0x36b, 0x2, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x80, 0x8, 0x4000000}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r6, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0x120000000000000}, 0x18) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0xc0000, 0x0) r11 = socket(0x15, 0x5, 0x0) getsockopt(r11, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) syz_open_pts(r10, 0x0) 2.756786177s ago: executing program 2 (id=313): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@nolazytime}, {@stripe={'stripe', 0x3d, 0x10000}}, {@dioread_nolock}]}, 0x1, 0x3f0, &(0x7f00000008c0)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000002c0)='2f', 0x2, 0x8080c61) fallocate(r3, 0x3, 0x5000000, 0x8000c62) fallocate(r2, 0x100000003, 0x800002, 0x28120001) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r8 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0xe4f4, 0x1, 0x1, 0x288}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x12, 0x4004, @fd=r8, 0x0, 0x0, 0x0, 0xe, 0x0, {0x1}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5, @ANYBLOB="770ba4"], 0x40}}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @loopback}, @private2, @loopback, 0x8caa, 0x8, 0xfff8, 0x500, 0x3, 0x2080200, r5}) setrlimit(0x2, &(0x7f00000000c0)={0x2, 0x3}) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000003000/0x4000)=nil) 2.738146999s ago: executing program 3 (id=314): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@auto_da_alloc}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000580)=ANY=[], 0xfe37, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) socket(0x10, 0x3, 0x0) futex(&(0x7f000000cffc)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000300), 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="020f0000110000000000000000000000030006000000000002004e23ac1e010100000000000000000300050000000000020000007f0000010000000000000000010018000000000008001200000002"], 0x88}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) 2.092253727s ago: executing program 3 (id=315): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = io_uring_setup(0x60f8, &(0x7f0000000a40)={0x0, 0x1, 0x2, 0x0, 0x40003bd}) syz_mount_image$ext4(&(0x7f0000000d40)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f00000000c0)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}]}, 0x3, 0x4ee, &(0x7f0000002680)="$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") syz_io_uring_setup(0x6bd2, &(0x7f00000004c0)={0x0, 0x81fb, 0x4, 0x1, 0x1c5, 0x0, r1}, &(0x7f0000000280), &(0x7f0000000380)) sysinfo(0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000200)=0x9, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) fcntl$setpipe(r3, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) r9 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r9, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.059077099s ago: executing program 5 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = creat(&(0x7f0000000600)='./file0\x00', 0x12c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x80000100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000300)={0x0, 0x5c, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x4001000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3, @ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2], 0x0, 0x6de3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) fspick(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000000000000000000000700000001890b04ac1414"], 0x20}, 0x4000) mq_notify(0xffffffffffffffff, 0x0) unshare(0x6020400) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r7, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595b9483683fb7fcac2881731c46bffa49ed496fc644240945fc5df84", 0x21}], 0x1, 0x0) 2.03632595s ago: executing program 0 (id=317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)) r5 = fsmount(0xffffffffffffffff, 0x1, 0x4) r6 = socket$caif_stream(0x25, 0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000440)="f5", 0x1}], 0x1}}], 0x1, 0x18440) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r7, &(0x7f0000000840)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=@delneigh={0x90, 0x1d, 0x800, 0x70bd27, 0x25dfdbfc, {0x1c, 0x0, 0x0, r10, 0x8, 0x24, 0x3}, [@NDA_FDB_EXT_ATTRS={0x10, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xfe}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_SRC_VNI={0x8, 0xb, 0xa9eb}, @NDA_DST_IPV6={0x14, 0x1, @private0}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_NH_ID={0x8, 0xd, 0x1}, @NDA_VLAN={0x6, 0x5, 0x3}, @NDA_LLADDR={0xa, 0x2, @random="8f9e153ef26e"}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}]}, @NDA_FDB_EXT_ATTRS={0x18, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8080}, 0x1) 1.722657159s ago: executing program 2 (id=318): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000a000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$GIO_SCRNMAP(r2, 0x5608, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000"], 0x48) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000280)={@rand_addr, @local}, &(0x7f00000002c0)=0xc) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x42000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xe4, 0x6}, 0x100000, 0x0, 0x0, 0x5, 0x6, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0) write(r4, &(0x7f0000000300)="240000001a005f0600000007000904018000200000000000000000000400010000000000", 0x24) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000440)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_test={0x51, 0x0, 0x8}}) futex(&(0x7f0000000180)=0x2, 0x2, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)=0x2, 0x1) inotify_init1(0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x420000, 0x0) inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x24000d81) 1.493057072s ago: executing program 2 (id=319): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x80000020}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)=ANY=[@ANYBLOB="20000000150a0309"], 0x20}, 0x1, 0x0, 0x0, 0x8009}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x3, &(0x7f0000000080)=0x0) unshare(0x22000600) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000180)) ioctl$EVIOCGRAB(r5, 0x40044590, 0x0) io_submit(r4, 0x8, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="0300ffff0000", 0x6}]) 1.436217146s ago: executing program 3 (id=320): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1, 0x0, 0x10000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x17, 0xfdff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x61) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="080027bd7000fedbdb250a00000000000400", @ANYRES32=0x0, @ANYBLOB="0c0099006c8400002700000014006e80040002000400010004000200"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) r5 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) readv(r6, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=@newnexthop={0x1c, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r8, 0xffffffffffffffff, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r9, 0x5453, 0x0) 1.128391294s ago: executing program 5 (id=321): capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000040)={0x200000, 0x1fffff, 0x20000000}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {}]}) socket$inet6(0xa, 0x3, 0x8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1000002, 0x0, 0x106, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffd, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}}}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = io_uring_setup(0x4a77, &(0x7f00000001c0)={0x0, 0x8000f8e0, 0x10000, 0x3, 0x533}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x806, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000040), 0x4) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdir(0x0, 0x0) 1.127216584s ago: executing program 0 (id=322): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x20, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff0000809e1846bc5a06f69646ce2b0000bfa200000000000007020000f8ffffffb703000108000000b7040000000000008500000003007006191405e1340209a615c4334ba6c02021ac8170ba9a149d425b6b9d5a2feed1159ed4f778b6a2cdb0fc6b236a2a106cd830b6787ba29c2985b1fbf54b7682d485d17764f9b86af82ddeb44357583af91e1545257c882f6b6b0b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="940000001a000100000000000000000081008000000000000000000014000200fc01000000000000000000000000000114000100000000000000000000000000000000001400010020010000000000000000000000000001140002000000000000000000000000001700000014000100fc010000000000000000000000000000140001"], 0x94}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x1, 0x1, {{0x19, 0x4, 0x0, 0x7, 0x64, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@ssrr={0x89, 0xf, 0x9f, [@dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x64010102, @broadcast]}, @end, @rr={0x7, 0xb, 0x83, [@broadcast, @remote]}, @ssrr={0x89, 0x13, 0xc3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback]}, @noop, @ssrr={0x89, 0x1f, 0x15, [@multicast2, @rand_addr=0x64010100, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @local]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x2}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r3], 0x58}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000a40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040), &(0x7f0000000380)=ANY=[], 0xc7, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES32], 0x1, 0x11e0, &(0x7f0000003040)="$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") openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x19, 0x0, 0x7ffc0001}]}) sysfs$2(0x2, 0x0, &(0x7f0000000400)=""/7) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000850000000000000000000000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007bb7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x2040400) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x7f, 0x1800}], 0x1, 0x0) unshare(0x60400) 1.124443404s ago: executing program 2 (id=323): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='timer_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x3ff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000300)={r7, @in={{0x2, 0x4e22, @multicast2}}, [0x6, 0xe, 0x267c, 0x8, 0x20000001, 0xa2, 0x6, 0x7, 0x5, 0x9, 0x0, 0x0, 0x6, 0xfff, 0x8]}, &(0x7f0000000400)=0x100) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x8000, &(0x7f0000001dc0)={0x87, 0x0, 0x20000}, 0x20) fcntl$setstatus(r3, 0x4, 0x7c00) dup3(r4, r3, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) 1.03096476s ago: executing program 3 (id=324): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x6, 0x4eb, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_tcp(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) dup3(r3, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) 973.512673ms ago: executing program 5 (id=325): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xca1f}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000018, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) unshare(0x2040400) r1 = socket$inet6(0xa, 0x806, 0x0) listen(r1, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = syz_io_uring_setup(0x5d11, &(0x7f0000000300)={0x0, 0x80291b, 0x1000, 0xfffffffd, 0xec}, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x3, 0xfffffffd, 0x0, 0x0, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800f4ff0d00000000000000f4e15c3318120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r10}, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket(0xa, 0x801, 0x0) getsockopt(r11, 0x29, 0x43, &(0x7f0000b3ffac)=""/69, &(0x7f0000001ffc)=0x45) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 858.420629ms ago: executing program 3 (id=326): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x18, 0x5ac, 0x259, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x68, 0x5, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0x4d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x5, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x4, 0xb, 0x1}}]}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x110, 0x8c, 0x81, 0x5, 0x40, 0x65}, 0xc, &(0x7f0000000880)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x4, 0xd, 0xa752}]}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r6, &(0x7f0000000d40)={0x24, &(0x7f0000000b80)={0x60, 0xa, 0x6e, {0x6e, 0xe, "5dd1274535648a53caaee7a26567893b616716c10db7ed01e2ab0be0c9da1e88f3749ae8a8ad0c4e6cacca228236039a37c5380c1774e287e724a06e6337567b07138dd368c4863490f7eb5e61783ea4f7d6bd5feae0d76d836956e04782cb853dc8f044b14598abde3d3d79"}}, &(0x7f0000000c80)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000cc0)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x4, '?'}]}}, &(0x7f0000000d00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x4f8}}}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_getscheduler(0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000, 0x3, &(0x7f00003c6000/0x3000)=nil) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x6, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$packet(r1, &(0x7f0000000100)={0x11, 0x4, r2}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', r2, 0x700, 0x700, 0x6, 0x6, {{0x27, 0x4, 0x2, 0x14, 0x9c, 0xfff, 0x0, 0x2, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xf, 0x87, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x2a}]}, @timestamp_prespec={0x44, 0x2c, 0xc5, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc50dfe64}, {@multicast2, 0xfffffff8}, {@empty, 0x3}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x6, 0x3, 0x4, [{@local, 0x10}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x14, 0x79, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8b2c}, {@private=0xa010102, 0x8}]}, @lsrr={0x83, 0xb, 0x6d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ssrr={0x89, 0x13, 0x36, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, @empty, @dev={0xac, 0x14, 0x14, 0x1e}]}, @generic={0x86, 0x5, "343286"}]}}}}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@stripe={'stripe', 0x3d, 0x4}}, {@noinit_itable}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") 783.569204ms ago: executing program 0 (id=327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={r2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$phonet(0x23, 0x2, 0x1) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8002, 0x0, 0x0, 0x0, {0xa, 0x0, 0xfffffffe, @private1, 0x826f}}}, 0x32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setitimer(0x0, 0x0, &(0x7f0000000700)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r10}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r11 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 515.26282ms ago: executing program 5 (id=328): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x102020, 0x800000000, 0x0, 0x6, 0x3, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@deltclass={0x30, 0x29, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0x0, 0x7}, {0x4}}, [@tclass_kind_options=@c_netem={0xa}]}, 0x30}}, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000160a030200000000000000000200fffb0900020073797a30000000000900010073797a300000000040000380080001400000000008000240004000002c0003801400010074756e6c3000000000000000000000001400010074756e6c30"], 0x94}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) io_cancel(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0, 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000010c0)={[{@debug}, {@auto_da_alloc}, {@acl}, {@errors_remount}]}, 0xfe, 0x515, &(0x7f0000001a00)="$eJzs3U1vG3kZAPBnJnY2abM4CxyWldhdsYuSCOo0G7obcVhAQnCqVCj3EhI3iuLEVeK0TVTRVHwAJIQAiQucuCDxAZBQPwJCqgR3BAhUQQsHDoVBtsdtmtppSv0C8e8n/et59fM8rWc8/5mpJ4CR9XZEzEZElmXZXESU8ulp3uKg1RrLPXxwa6XRksiyy39NIsmntd/rlfz1bL7aRER8/asR30qejbuzt7+xXK1WtvPx+fpm8ijL9s+tby6vVdYqW4uLC+8vfbB0Yel8T+qcjogPv/ynH3z3Z1/58FefvfH7K3+Z/XarwJbDdfRSq/Ri8++irRAR2/0INiSFZoUtF4acCwAAx2sc7380Ij4VEXNRirHm0VzT3HAzAwAAAHol+8JUPEpa1/8AAACA0ymNiKm4NF7O7/edijQtl1v38H48zqTV2k79M1np8fmC6SimV9erlfP5vQPTUUwa4wv5Pbbt8feOjC9GxGsR8f3SZHO8vFKrrg71zAcAAACMjrPNPn+Stvv//yi1+v8AAADAKTM97AQAAACAvtP/BwAAgNPvxP3/Yn/zAAAAAPri0sWLjZa1n3+9en1vd6N2/dxqZWejvLm7Ul6pbV8rr9Vqa/cLEbXN571ftVa79rnY2r05X6/s1Od39vavbNZ2t+pX1p96BDYAAAAwQK+9dfd3rcf/3U4jIksOzStGZGOHFy4MPj+gf9IXWfiP/csDGLyxYScADI1Dehhd7ugHnrcf6Hrzzq97nwsAANAfM59oXv+Pg89PNlvDeD4vGWpmQL/l1/8T2zqMHtf/YXS5/gejq3jcEYBOAZx66Qk29Ze//p9lL5QUAADQc1PNlqTlvB8wFWlaLke82nwswJP/HfSRiPhtqfjK1fVqZaE5JXF6AAAAAAAAAAAAAAAAAAAAAAAAAABOKMuSyLpoPQ0wxrvNBwAAAP4/RKR/TvLnf82U3p06en5gPPlnqfkaETd+fPmHN5fr9e2FxvS/PZ5e/1E+/b2Bn74AAAAAOmj309v9eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADopYcPbq202yDj3v9SREx3il+IiYhIYyKKEXHm70kUDq2XRMRYD+If3ImI1zvFTxppxXQzi2fjpxExOeT4Z3sQH0bZ3cb+54udtr803m6+dt7+Cnl7Wa3931jH+BN5/LEu+79XO71h+uykN+79Yr5r/DsRbxQ673/a8ZMj8ZO8vXPCGr/5jf39bvOyn0bMdPz+SZ6qdT4pXJvf2ds/t765vFZZq2wtLi68v/TB0oWl8/NX16uV/M+OMb73yV/++7j6z3SJP92x/ux2e913T1j/v+7dfPCx1mDxyKxi/CTLZt/p/Pl7vWP8J999n87/uRvjM+3hg9bwYW/+/DdvvnVM/atd6k+7xG/nMHvC+ue+9p0/nHBRAGAAdvb2N5ar1cr2iw0kEQcvsbqBwQ60j6WHlcZkDDDochy3TPsgdgD5tDsK/wMfgP9iYDj7IwAAoH+Sxwf9w84EAAAAAAAAAAAAAAAAAAAARtfzfgYsevBzYkdjHgynVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAY/0nAAD//1xLxvE=") pipe(&(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) socket$inet6(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x5) 248.876496ms ago: executing program 2 (id=329): r0 = socket$inet(0x2, 0x3, 0x33) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f00000001c0)='selinux_audited\x00', r1, 0x0, 0xffff}, 0x18) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000080)={0x5, "8d65faac780c0ef0bd3c9f48d81f2a183f8095bdae96b1d71a1d4b11798f38c4b19b51d95732a5a1840c7d61229dad439fc3a7bb7e15fbdeb971b26ac71e41869ca88c2072121bd73f724eec0c27d1191968077a3ad6b2a92ca73f4a5aacf440bc51fb92bd18656dfe48a0091a7d6b28fd616d608371319e186bbe16e86c4d5c34102c290c43cac0184bbfcb35fed911710114f76e7ff87789d258e6011070cbe3de5ae1dfaeab0c17c7a67d59f8d6a9581717a8b01c1fd6bc53192d5560d428ebda5bf0cfd08d07a467ccae7edf35017e41b34d7ab069575559249a096bb9a45f7fae6c990f4fe87b80fe8a36196dd99bd7c300f6b8513874b6906d96319b72e961b22f63d62df639ae21aa147c828a52444c2f468f89c31d980d170a62a1e10d96aa433df86da641ef0cb23aab959e58a284691dc6757793e5176caddd888bdc2ef8dcbd758348105dd53a746483a5787915ce3211a679f0384c4f0c5dc3fcd207ad0307c4a2f6926984363b08f7260b8a689d8492c097ea6b1f62a7fd9ff1d482951fd672c054b0428a3203f5ab9d6549333f9440fd4e617e37aeb876d552c6fb0eaccef650cc86f699337f4dd5aca81a2b5162e581eb2f29b6a890f2791dc23bb0d2893c5d3ef539e7532b3107c752bae6b93258c474bea73a7dc5038adba6633178e30f73e6631f053f569012e782493b6a98ad1c80a7bf7845b5e6b8e7"}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x208040) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00w\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000009c0)={'erspan0\x00', &(0x7f00000008c0)={'erspan0\x00', 0x0, 0x7800, 0x40, 0x1cf, 0xfff, {{0x2f, 0x4, 0x1, 0x5, 0xbc, 0x68, 0x0, 0x7f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp={0x44, 0x18, 0xa4, 0x0, 0x0, [0x7, 0x3c92, 0x7ff, 0xfffffffa, 0x9]}, @generic={0x0, 0x5, '(5U'}, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x5, 0x12, "5feef08e36b815c799aebfa00017e3e4"}, {0x6, 0x5, "ae31aa"}, {0x2, 0x8, "eef1287a4017"}]}, @rr={0x7, 0x1f, 0x77, [@empty, @local, @multicast2, @remote, @multicast2, @multicast1, @broadcast]}, @lsrr={0x83, 0x23, 0xc2, [@empty, @rand_addr=0x2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2, @rand_addr=0x64010102, @remote, @loopback]}, @timestamp={0x44, 0x10, 0xb7, 0x0, 0xf, [0x1, 0x4, 0x8]}, @timestamp={0x44, 0x8, 0x53, 0x0, 0x2, [0x1]}, @generic={0x88, 0xb, "39281abb7f194404ac"}]}}}}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)="b59080246f3775037c67c45c9ab99cbc14dd7afdc573cda8c15d64bfd0293344a467cc41ff54413fb47b3e1434d1517ac662ac5250447b4845f269a652b0183cc1b06a43d58990efbace75498281a07c73c541f3df738e92fda4ace869c7537f33cf32d0", 0x64}, {&(0x7f0000000400)="777f2f9c3344bbda75a9b44fd0bf798e3cd87ee3f3fdfd19dcbf7d", 0x1b}, {&(0x7f0000000540)="9f14fcdcbb5aa0f8db87fcb8bb060750c75bf5c6dc2a1b1844ba34484d3cd13e8b8f10ff1a7493e5f0d048413edb18b6cec2db5e3b94faca265982baa5da03c18e78f50e8293148b42478de60f24c8503e6d51d407b1bdc5614f47b8657c27a8af64c1bed93076293884923805132801ead23007858e61a56db01d", 0x7b}, {&(0x7f0000000700)="ad896048ec5457a26d1d63041ffdc3a88b861118839927ab0254075fddab208fb4a95a12254a45c6828545a1c72abbd47a1f87df1d6dac58fb89b81a61d89b9c20b6d4e9f4c25bc09bb7f82909750dff77a1998662f668d27d0d247732e6f8fb7dfcd69a991d6641317a2a5f3dea5332dacec5eef0f9154f72a604108ab734e752c66a16f485", 0x86}, {&(0x7f00000005c0)="34fa4c7a5bf62c2be751f1dbf8eb67289748a70df352ef86552674040ff22d8d00992fea5efef5cdc3b7a9524cb0ecfdcf422ec5812992074abd96159545f5c7538f9a1829f523a0074c6a1e5840fb7623fe29abadec4e7b586225ef9a1071496be2e1f60630ab310d6197678da1a20170b426aa40fa5b0e", 0x78}, {&(0x7f00000007c0)="b2d5327f27b383c089497100de24002d1732ee327b5e55f0f0a9bca72c55786671c7bdddbd68203fc6cf9cb0d13fd0412755cbb6adcea4c7166dbc8b23da662db27c6b7c98b46df6163d70a87ade51e4f566e8e99bdcb85ddf9af5316eae169d02cabbc56c36aae18b1060f5c1f1", 0x6e}], 0x6, &(0x7f0000000b00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x70}}], 0x1, 0x441) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$TCSETSF(r2, 0x5404, 0x0) 246.257726ms ago: executing program 0 (id=339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) personality(0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_bp={0x0}, 0x4008, 0x1000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8a000000000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x0, 0x7}, {}, {0x4}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fsi_master_acf_copro_response\x00', r1, 0x0, 0x1000000004}, 0x18) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) statfs(0x0, 0x0) ioctl$GIO_SCRNMAP(r7, 0x5608, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r8, &(0x7f0000000080)={&(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/231, 0xe7}, {&(0x7f0000000780)=""/202, 0xca}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000500)=""/129, 0x81}, {&(0x7f0000000880)=""/139, 0x8b}, {&(0x7f0000000b00)=""/159, 0x9f}], 0x6}, 0x2002) execve(0x0, 0x0, 0x0) 245.397676ms ago: executing program 1 (id=330): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) iopl(0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = shmget(0x2, 0x2000, 0x100, &(0x7f00000a7000/0x2000)=nil) shmat(r4, &(0x7f0000102000/0x4000)=nil, 0x1000) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000ff7f05002f000000000008003b000200000005002a0000000000080f31009c040000050081000000000008002b00620d00000a000900bbbbbbbbbbbb00"/82], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4040001) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010076657468305f746f5f627269646765001400010067656e6576653000000000000000000048000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530"], 0xfc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000e27f08000100000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d07c1073297d52c7a72812"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000a081948a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000440)='0', 0x1}], 0x2) syz_emit_ethernet(0x36, 0x0, 0x0) 32.843128ms ago: executing program 0 (id=331): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x2a, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x5411, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xe, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRESOCT=r1, @ANYRES16=r2], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000e8ff00000000000000030000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$link(0x8, 0x0, 0xfffffffffffffffa) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000013) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000036dd08000000cb420009000000010000004b36e2bb95d16f175154a3685d09eb8dc99ba7a8ffbf37b252b09f65cd304161185153eec27419cff30e572ceaf6a6bf0cce8dbcd515ea030a509120aa95ef14542fca60ac85d37b4e0379b90178e5d529814284", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='ata_bmdma_status\x00', r7, 0x0, 0x1}, 0x18) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000011"], 0x24}}, 0x0) setsockopt$MRT_ADD_MFC(r3, 0x0, 0x5, &(0x7f0000000180)={@multicast2, @multicast2, 0x0, "66c5aff8a7eb3af1f6cec2e70900", 0x3, 0x40, 0x8000080, 0x1000}, 0x3c) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) 0s ago: executing program 2 (id=332): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvndhx0uwmu+wBEOwuuwsFVXUSdzda7QGWEwK0EmKPIHVD4kZR7DiKndKEHtIzVyQqcYIjfwDnnrhzQXDjUg5I/IhADRIHoxlPUje1m6hJ7Cj+fKTRvDdv6u97Tee9+pvEL4CR9XZE7EVEMSI+i4iZ7HouO+LjzpHc92T//vLB/v3lXLTbn/4zl7Yn16LrzySuZa9ZiogffifiJ7nn4zZ3dteXarXqVlafa9U355o7uzfX6kur1dXqRqWyuLA4/+GtDyrnNta36sWs9OXHf9j7xs+Sbk1nV7rHcZ46Qy8cxUmMR8T3LyLYEIxl4ykOuyO8lHxEvB4R76TP/0yMpV9NAOAqa7dnoj3TXQcArrp8mgPL5ctZLmA68vlyuZPDeyOm8rVGs3XjTmN7Y6WTK5uNQv7OWq06n+UKZ6OQS+oLaflpvXKsfisiXouIX0xMpvXycqO2Msz/+ADACLt2bP3/z0Rn/QcArrjSsDsAAAyc9R8ARo/1HwBGj/UfAEZPZ/2fHHY3AIAB8v4fAEaP9R8ARsoPPvkkOdoH2edfr9zd2V5v3L25Um2ul+vby+XlxtZmebXRWE0/s6d+0uvVGo3Nhfdj+97sNzebrbnmzu7temN7o3U7/Vzv29VCetfeAEYGAPTz2luP/pxLVuSPJtMjuvZyKAy1Z8BFyw+7A8DQjA27A8DQ2O0LRtcZ3uNLD8AV0WOL3meUev2CULvdbl9cl4ALdv0L8v8wqrry/34KGEaM/D+MLvl/GF3tdu60e/7HaW8EAC43OX6gz/f/X8/Ov82+OfDjleN3PLzIXgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDldrj/bznbC3w68vlyOeKViJiNQu7OWq06HxGvRsSfJgoTSX1hyH0GAM4q/7dctv/X9Zn3pp9pevPaUbEYET/91ae/vLfUam39MaKY+9fE4fXWw+x6ZfC9BwBOdrhOJ+dHXW/kn+zfXz48Btmfv387Ikqd+Af7xTg4ij8e4+m5FIWImPp3Lqt35LpyF2ex9yAiPt9r/LmYTnMgnZ1Pj8dPYr8y0Pj5Z+Ln07bOOfm7+Nw59AVGzaNk/vm41/OXj7fTc+/nv5TOUGeXzX/JSy0fpHPg0/iH899Yn/nv1DHe//13O6XJ59seRHxxPOIw9kHX/HMYP9cn/nunjP+XL735Tr+29q8jrkfv+N2x5lr1zbnmzu7NtfrSanW1ulGpLC4szn9464PKXJqjnuu/Gvzjoxuv9mtLxj/VJ37phPF/9ZTj/83/PvvRV14Q/+vv9oqfjzdeED9ZE792yvhLU78r9WtL4q/0Gf9JX/8bLw77vWJWePzX3ee2DQcAhqe5s7u+VKtVtxQULn8h+Sd7CbrRs/CtQcUqRu+mn7/beaaPNbXbLxWr34xxHlk34DI4eugj4r/D7gwAAAAAAAAAAAAAANDTIH5jadhjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Or6fwAAAP//sUPPoQ==") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffd4) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$unix(0x1, 0x5, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000001000007b8af8ff00000000b7080000000000007b8af0ff00800000bfa100000000000007010000f8ffffddffffb70200000800000018230000f3b18350a656fb66951acbe279d328945bb15dd2455e91c3868e17e3364d6834f833e565e6ef401bccc7000095b0eabdd06507742dacde77daa47cb21009ac1841d4ccbfe91259a09417f8b2f9fd4af9eac3e9d050dab1", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x6, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x100}, [@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @exit, @func, @tail_call]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1, 0x2, 0x5, 0xc09}, {0x0, 0x4, 0x1, 0x8}, {0x4, 0x81, 0x4, 0xb}, {0x3, 0xc, 0xe, 0x2}]}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) msgsnd(0x0, &(0x7f00000017c0)={0x3, "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"}, 0xfd1, 0x0) kernel console output (not intermixed with test programs): EXT4-fs: Ignoring removed bh option [ 33.263368][ T3492] EXT4-fs: inline encryption not supported [ 33.272055][ T3492] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.291141][ T3492] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 33.301547][ T3492] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 2: comm syz.1.14: lblock 2 mapped to illegal pblock 2 (length 1) [ 33.317947][ T3492] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 48: comm syz.1.14: lblock 0 mapped to illegal pblock 48 (length 1) [ 33.337916][ T3492] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.14: Failed to acquire dquot type 0 [ 33.351431][ T3492] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 33.362011][ T3492] EXT4-fs error (device loop1): ext4_evict_inode:256: inode #11: comm syz.1.14: mark_inode_dirty error [ 33.389665][ T3492] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 33.400183][ T3492] EXT4-fs (loop1): 1 orphan inode deleted [ 33.406852][ T3492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.419736][ T1756] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 33.439049][ T1756] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 0 [ 33.465204][ T3500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 33.471921][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.490158][ T3297] EXT4-fs error (device loop1): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 33.508420][ T3297] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 33.518244][ T3297] EXT4-fs error (device loop1): ext4_quota_off:7194: inode #3: comm syz-executor: mark_inode_dirty error [ 33.540710][ T3502] loop1: detected capacity change from 0 to 256 [ 33.576511][ T3504] loop0: detected capacity change from 0 to 512 [ 33.583556][ T3504] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.596689][ T3504] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.605157][ T3502] infiniband syz!: set active [ 33.611201][ T3502] infiniband syz!: added team_slave_0 [ 33.630040][ T3504] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.645395][ T3504] EXT4-fs (loop0): 1 truncate cleaned up [ 33.656178][ T3504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.677783][ T3502] RDS/IB: syz!: added [ 33.705232][ T3502] smc: adding ib device syz! with port count 1 [ 33.713677][ T3502] smc: ib device syz! port 1 has pnetid [ 33.918758][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.000867][ T3513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'. [ 34.052775][ T3513] loop2: detected capacity change from 0 to 512 [ 34.068087][ T3522] loop4: detected capacity change from 0 to 128 [ 34.075955][ T3502] syz.1.17 (3502) used greatest stack depth: 10776 bytes left [ 34.089266][ T3513] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.20: invalid indirect mapped block 4294967295 (level 1) [ 34.115323][ T3525] netlink: 'syz.3.24': attribute type 27 has an invalid length. [ 34.153784][ T3513] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.20: invalid indirect mapped block 4294967295 (level 1) [ 34.230016][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.233968][ T3513] EXT4-fs (loop2): 2 truncates cleaned up [ 34.237336][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.251686][ T3513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.269547][ T3529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 34.319229][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.331682][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.352515][ C1] hrtimer: interrupt took 31369 ns [ 34.361315][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.472926][ T3525] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.482157][ T3525] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.491142][ T3525] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.500070][ T3525] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.535124][ T3529] bridge_slave_1: left allmulticast mode [ 34.540790][ T3529] bridge_slave_1: left promiscuous mode [ 34.546734][ T3529] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.608350][ T3538] loop2: detected capacity change from 0 to 1024 [ 34.625594][ T3529] bridge_slave_0: left allmulticast mode [ 34.631311][ T3529] bridge_slave_0: left promiscuous mode [ 34.637162][ T3529] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.647882][ T3538] EXT4-fs: Mount option(s) incompatible with ext2 [ 34.695896][ T3538] loop2: detected capacity change from 0 to 1764 [ 34.796078][ T3547] SELinux: syz.3.30 (3547) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 34.968294][ T3554] lo speed is unknown, defaulting to 1000 [ 35.008334][ T3554] lo speed is unknown, defaulting to 1000 [ 35.038474][ T3554] lo speed is unknown, defaulting to 1000 [ 35.056217][ T3554] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 35.112404][ T3554] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 35.167029][ T3554] lo speed is unknown, defaulting to 1000 [ 35.175117][ T3558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.33'. [ 35.184643][ T3554] lo speed is unknown, defaulting to 1000 [ 35.198695][ T3554] lo speed is unknown, defaulting to 1000 [ 35.218184][ T3554] lo speed is unknown, defaulting to 1000 [ 35.244860][ T3554] lo speed is unknown, defaulting to 1000 [ 35.260183][ T3554] lo speed is unknown, defaulting to 1000 [ 35.273967][ T3558] loop4: detected capacity change from 0 to 512 [ 35.301422][ T3558] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 35.338472][ T3558] EXT4-fs (loop4): 1 truncate cleaned up [ 35.364751][ T3558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.386892][ T3563] netlink: 268 bytes leftover after parsing attributes in process `syz.3.34'. [ 35.395865][ T3563] unsupported nla_type 65024 [ 35.401649][ T3558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.423375][ T3554] syz.1.32 (3554) used greatest stack depth: 10736 bytes left [ 35.466648][ T3567] tmpfs: Bad value for 'mpol' [ 35.506720][ T3567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.524043][ T3567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.548816][ T3570] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 35.650378][ T3581] loop0: detected capacity change from 0 to 256 [ 35.692830][ T3581] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.788868][ T3584] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 35.953621][ T9] IPVS: starting estimator thread 0... [ 36.053857][ T3587] IPVS: using max 2736 ests per chain, 136800 per kthread [ 36.078681][ T29] kauditd_printk_skb: 621 callbacks suppressed [ 36.078693][ T29] audit: type=1326 audit(1740130521.134:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd1de54067 code=0x7ffc0000 [ 36.278554][ T29] audit: type=1326 audit(1740130521.164:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd1ddf9299 code=0x7ffc0000 [ 36.282797][ T3589] loop3: detected capacity change from 0 to 164 [ 36.301613][ T29] audit: type=1326 audit(1740130521.164:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd1de54067 code=0x7ffc0000 [ 36.301641][ T29] audit: type=1326 audit(1740130521.164:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd1ddf9299 code=0x7ffc0000 [ 36.301738][ T29] audit: type=1326 audit(1740130521.164:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fbd1de5d0a9 code=0x7ffc0000 [ 36.378217][ T29] audit: type=1326 audit(1740130521.164:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd1de54067 code=0x7ffc0000 [ 36.401437][ T29] audit: type=1326 audit(1740130521.164:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd1ddf9299 code=0x7ffc0000 [ 36.424545][ T29] audit: type=1326 audit(1740130521.164:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fbd1de5d0a9 code=0x7ffc0000 [ 36.447770][ T29] audit: type=1326 audit(1740130521.174:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd1de54067 code=0x7ffc0000 [ 36.470910][ T29] audit: type=1326 audit(1740130521.174:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd1ddf9299 code=0x7ffc0000 [ 36.553009][ T3589] Unable to read rock-ridge attributes [ 36.580636][ T3593] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 36.593900][ T3595] loop0: detected capacity change from 0 to 512 [ 36.601545][ T3589] Unable to read rock-ridge attributes [ 36.608739][ T3589] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 36.611853][ T3595] EXT4-fs: Ignoring removed i_version option [ 36.622441][ T3595] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.645367][ T3595] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.656405][ T3589] block device autoloading is deprecated and will be removed. [ 36.683409][ T3599] 9pnet: Could not find request transport: º [ 36.697152][ T3595] EXT4-fs (loop0): 1 truncate cleaned up [ 36.703713][ T3595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.718709][ T3591] 9pnet_fd: Insufficient options for proto=fd [ 36.779718][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.812349][ T3600] netlink: 48 bytes leftover after parsing attributes in process `syz.3.41'. [ 36.864408][ T3591] loop2: detected capacity change from 0 to 8192 [ 37.034822][ T3620] loop0: detected capacity change from 0 to 512 [ 37.064610][ T3617] mmap: syz.3.48 (3617) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.126160][ T3623] loop2: detected capacity change from 0 to 512 [ 37.178066][ T3623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.195914][ T3620] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.49: bg 0: block 248: padding at end of block bitmap is not set [ 37.222080][ T3627] loop3: detected capacity change from 0 to 256 [ 37.286430][ T3623] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.315121][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.324264][ T3620] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.49: Failed to acquire dquot type 1 [ 37.337064][ T3627] vfat: Bad value for 'shortname' [ 37.338380][ T3620] EXT4-fs (loop0): 1 truncate cleaned up [ 37.353864][ T3620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.376676][ T3627] loop3: detected capacity change from 0 to 1024 [ 37.397227][ T3627] EXT4-fs: Ignoring removed nobh option [ 37.402829][ T3627] EXT4-fs: Ignoring removed bh option [ 37.421361][ T3620] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.474951][ T3627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.557303][ T3620] syz.0.49 (3620) used greatest stack depth: 9504 bytes left [ 37.643248][ T3641] Zero length message leads to an empty skb [ 37.663097][ T3636] dummy0: entered promiscuous mode [ 37.818540][ T3636] dummy0: left promiscuous mode [ 37.844825][ T3627] netlink: 76 bytes leftover after parsing attributes in process `syz.3.51'. [ 37.873265][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.884721][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.916515][ T28] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:1: Failed to release dquot type 1 [ 37.960750][ T3650] loop1: detected capacity change from 0 to 512 [ 37.970603][ T3650] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 39.197315][ T3653] loop0: detected capacity change from 0 to 512 [ 39.204106][ T3653] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.215833][ T3653] EXT4-fs (loop0): 1 truncate cleaned up [ 39.222004][ T3653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.207134][ T3653] netlink: 'syz.0.56': attribute type 21 has an invalid length. [ 40.216761][ T3653] netlink: 132 bytes leftover after parsing attributes in process `syz.0.56'. [ 40.234894][ T3653] xt_NFQUEUE: number of total queues is 0 [ 41.350443][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 41.350466][ T29] audit: type=1400 audit(1740130526.404:1138): avc: denied { create } for pid=3659 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.391240][ T29] audit: type=1326 audit(1740130526.434:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 41.414586][ T29] audit: type=1326 audit(1740130526.434:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 41.437841][ T29] audit: type=1326 audit(1740130526.434:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 41.461106][ T29] audit: type=1326 audit(1740130526.434:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 41.484398][ T29] audit: type=1326 audit(1740130526.434:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 41.507719][ T29] audit: type=1326 audit(1740130526.444:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 41.531014][ T29] audit: type=1326 audit(1740130526.444:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 41.554314][ T29] audit: type=1326 audit(1740130526.444:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 41.577560][ T29] audit: type=1326 audit(1740130526.444:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 41.607785][ T3663] loop4: detected capacity change from 0 to 512 [ 41.624937][ T3663] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.641588][ T3665] netlink: 'syz.3.59': attribute type 39 has an invalid length. [ 41.653225][ T3663] EXT4-fs (loop4): 1 truncate cleaned up [ 41.673363][ T3663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.706138][ T3669] loop3: detected capacity change from 0 to 512 [ 41.724659][ T3669] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.747037][ T3668] loop2: detected capacity change from 0 to 8192 [ 41.761853][ T3669] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.59: corrupted in-inode xattr: e_name out of bounds [ 41.783934][ T3669] EXT4-fs (loop3): Remounting filesystem read-only [ 41.800724][ T3669] EXT4-fs (loop3): 1 truncate cleaned up [ 41.811139][ T3669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.844955][ T3669] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 41.852209][ T3669] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.055080][ T3673] loop1: detected capacity change from 0 to 512 [ 42.062187][ T3673] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.089461][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.095188][ T3673] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.61: invalid indirect mapped block 4294967295 (level 1) [ 42.114134][ T3673] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.61: invalid indirect mapped block 4294967295 (level 1) [ 42.114770][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.140728][ T3673] EXT4-fs (loop1): 2 truncates cleaned up [ 42.149035][ T3673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.164914][ T3677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 42.229711][ T3686] loop2: detected capacity change from 0 to 2048 [ 42.237961][ T3684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 42.251376][ T3684] loop4: detected capacity change from 0 to 512 [ 42.258494][ T3684] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.267797][ T3686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.281934][ T3677] loop0: detected capacity change from 0 to 1024 [ 42.293971][ T3677] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 42.305008][ T3677] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 42.306180][ T3684] EXT4-fs (loop4): 1 truncate cleaned up [ 42.321054][ T3684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.343110][ T3677] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 42.353498][ T3677] EXT4-fs (loop0): invalid journal inode [ 42.359175][ T3677] EXT4-fs (loop0): can't get journal size [ 42.366056][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.377163][ T3677] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.62: blocks 2-2 from inode overlap system zone [ 42.392772][ T3677] EXT4-fs (loop0): failed to initialize system zone (-117) [ 42.396424][ T3673] process 'syz.1.61' launched '/dev/fd/3' with NULL argv: empty string added [ 42.400121][ T3677] EXT4-fs (loop0): mount failed [ 42.430067][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.469377][ T3698] loop2: detected capacity change from 0 to 128 [ 42.483108][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.497195][ T3700] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 42.506812][ T3698] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.533670][ T3698] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.622550][ T3709] netlink: 'syz.1.70': attribute type 27 has an invalid length. [ 42.669799][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.706250][ T3714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 42.748817][ T3702] loop3: detected capacity change from 0 to 1024 [ 42.755149][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.765682][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.769588][ T3702] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 42.789416][ T3702] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 42.799917][ T3702] EXT4-fs (loop3): invalid journal inode [ 42.806858][ T3702] EXT4-fs (loop3): can't get journal size [ 42.813051][ T3702] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.66: blocks 48-48 from inode overlap system zone [ 42.827841][ T3709] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.828274][ T3702] EXT4-fs (loop3): failed to initialize system zone (-117) [ 42.836937][ T3709] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.845276][ T3702] EXT4-fs (loop3): mount failed [ 42.852941][ T3709] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.866727][ T3709] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.956441][ T3717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.964206][ T3717] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.991127][ T3717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 43.246380][ T3734] 9pnet_fd: Insufficient options for proto=fd [ 43.276458][ T3737] loop0: detected capacity change from 0 to 512 [ 43.303583][ T3734] xt_TPROXY: Can be used only with -p tcp or -p udp [ 43.322883][ T3737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.432310][ T3743] netlink: 'syz.2.79': attribute type 5 has an invalid length. [ 43.444619][ T3744] loop1: detected capacity change from 0 to 512 [ 43.503572][ T3737] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.515543][ T3744] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.522138][ T3744] EXT4-fs: Ignoring removed oldalloc option [ 43.688065][ T3744] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.77: Parent and EA inode have the same ino 15 [ 43.746822][ T3744] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.77: Parent and EA inode have the same ino 15 [ 44.217739][ T3744] EXT4-fs (loop1): 1 orphan inode deleted [ 44.242204][ T3743] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 44.267025][ T3744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.301154][ T3772] loop2: detected capacity change from 0 to 512 [ 44.322272][ T3772] EXT4-fs (loop2): too many log groups per flexible block group [ 44.330044][ T3772] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 44.358372][ T3772] EXT4-fs (loop2): mount failed [ 44.370511][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.480296][ T3776] GUP no longer grows the stack in syz.2.84 (3776): 400000004000-400000008000 (400000002000) [ 44.490616][ T3776] CPU: 1 UID: 0 PID: 3776 Comm: syz.2.84 Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0 [ 44.490645][ T3776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 44.490663][ T3776] Call Trace: [ 44.490718][ T3776] [ 44.490724][ T3776] dump_stack_lvl+0xf2/0x150 [ 44.490750][ T3776] dump_stack+0x15/0x1a [ 44.490775][ T3776] __get_user_pages+0x1de5/0x2350 [ 44.490870][ T3776] ? __rcu_read_unlock+0x4e/0x70 [ 44.490893][ T3776] get_user_pages_remote+0x1df/0x790 [ 44.490918][ T3776] __access_remote_vm+0x15b/0x580 [ 44.490941][ T3776] access_remote_vm+0x34/0x50 [ 44.490960][ T3776] proc_pid_cmdline_read+0x3e5/0x6b0 [ 44.491139][ T3776] vfs_readv+0x3e2/0x660 [ 44.491156][ T3776] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 44.491189][ T3776] __x64_sys_preadv+0xf4/0x1c0 [ 44.491217][ T3776] x64_sys_call+0x2680/0x2dc0 [ 44.491297][ T3776] do_syscall_64+0xc9/0x1c0 [ 44.491332][ T3776] ? clear_bhb_loop+0x55/0xb0 [ 44.491359][ T3776] ? clear_bhb_loop+0x55/0xb0 [ 44.491386][ T3776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.491479][ T3776] RIP: 0033:0x7f74d069d0a9 [ 44.491498][ T3776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.491517][ T3776] RSP: 002b:00007f74ced07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 44.491593][ T3776] RAX: ffffffffffffffda RBX: 00007f74d08b5fa0 RCX: 00007f74d069d0a9 [ 44.491605][ T3776] RDX: 0000000000000001 RSI: 00004000000000c0 RDI: 0000000000000009 [ 44.491618][ T3776] RBP: 00007f74d071e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 44.491630][ T3776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.491641][ T3776] R13: 0000000000000000 R14: 00007f74d08b5fa0 R15: 00007fffd4c690c8 [ 44.491659][ T3776] [ 44.693867][ T3778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 44.744591][ T3778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.83'. [ 44.768905][ T3782] loop4: detected capacity change from 0 to 8192 [ 44.777620][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.823937][ T3782] loop4: p1 p3 p4 [ 44.827828][ T3782] loop4: p1 start 51379968 is beyond EOD, truncated [ 44.834534][ T3782] loop4: p3 size 100663552 extends beyond EOD, truncated [ 44.842293][ T3782] loop4: p4 start 8139008 is beyond EOD, truncated [ 44.947021][ T3789] netlink: 'syz.1.86': attribute type 10 has an invalid length. [ 44.954793][ T3789] netlink: 40 bytes leftover after parsing attributes in process `syz.1.86'. [ 44.978903][ T3791] loop3: detected capacity change from 0 to 2048 [ 45.012309][ T3792] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 1, id = 0 [ 45.021753][ T3789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.030617][ T3789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.030817][ T3797] loop0: detected capacity change from 0 to 2048 [ 45.039367][ T3789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.054531][ T3789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.064825][ T3789] team0: Port device geneve1 added [ 45.071312][ T3791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.072442][ T3797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.214146][ T3809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.222633][ T3807] loop2: detected capacity change from 0 to 128 [ 46.222751][ T3809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.294247][ T3804] xt_CT: No such helper "snmp" [ 46.328439][ T3808] xt_CT: No such helper "snmp" [ 46.339379][ T3808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.347927][ T3808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.407300][ T3807] bio_check_eod: 6543 callbacks suppressed [ 46.407353][ T3807] syz.2.90: attempt to access beyond end of device [ 46.407353][ T3807] loop2: rw=2049, sector=241, nr_sectors = 1 limit=128 [ 46.426494][ T3807] Buffer I/O error on dev loop2, logical block 241, lost async page write [ 46.460523][ T3807] syz.2.90: attempt to access beyond end of device [ 46.460523][ T3807] loop2: rw=2049, sector=241, nr_sectors = 136 limit=128 [ 46.542968][ T50] kworker/u8:3: attempt to access beyond end of device [ 46.542968][ T50] loop2: rw=1, sector=377, nr_sectors = 664 limit=128 [ 46.623640][ T3671] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.638426][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 46.638439][ T29] audit: type=1400 audit(1740130531.684:1481): avc: denied { append } for pid=3814 comm="syz.2.91" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.669124][ T3671] EXT4-fs (loop3): Remounting filesystem read-only [ 46.825567][ T29] audit: type=1400 audit(1740130531.884:1482): avc: denied { relabelfrom } for pid=3818 comm="syz.1.93" name="NETLINK" dev="sockfs" ino=5666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.849765][ T29] audit: type=1400 audit(1740130531.884:1483): avc: denied { relabelto } for pid=3818 comm="syz.1.93" name="NETLINK" dev="sockfs" ino=5666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 46.880335][ T29] audit: type=1400 audit(1740130531.934:1484): avc: denied { read write } for pid=3816 comm="syz.2.92" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 46.903890][ T29] audit: type=1400 audit(1740130531.934:1485): avc: denied { open } for pid=3816 comm="syz.2.92" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 46.927436][ T29] audit: type=1400 audit(1740130531.934:1486): avc: denied { ioctl } for pid=3816 comm="syz.2.92" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 47.061993][ T29] audit: type=1400 audit(1740130532.114:1487): avc: denied { mount } for pid=3824 comm="syz.2.94" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 47.107966][ T29] audit: type=1400 audit(1740130532.144:1488): avc: denied { write } for pid=3824 comm="syz.2.94" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.128604][ T29] audit: type=1400 audit(1740130532.144:1489): avc: denied { open } for pid=3824 comm="syz.2.94" path="/22/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.150559][ T29] audit: type=1400 audit(1740130532.154:1490): avc: denied { bind } for pid=3826 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.168984][ T3828] netlink: 14 bytes leftover after parsing attributes in process `syz.1.95'. [ 47.512641][ T3834] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.97'. [ 47.627184][ T3830] xt_bpf: check failed: parse error [ 47.655901][ T3830] Cannot find add_set index 0 as target [ 47.948236][ T3846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 47.966343][ T3846] loop2: detected capacity change from 0 to 512 [ 48.056147][ T3846] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.062534][ T3846] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 48.075734][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.086304][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.094098][ T3846] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 48.141194][ T3846] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.99: attempt to clear invalid blocks 2 len 1 [ 48.163649][ T3843] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 48.177166][ T3846] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.99: invalid indirect mapped block 1819239214 (level 0) [ 48.191820][ T3846] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.99: invalid indirect mapped block 1819239214 (level 1) [ 48.207371][ T3846] EXT4-fs (loop2): 1 truncate cleaned up [ 48.213684][ T3846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.234339][ T3843] loop1: detected capacity change from 0 to 512 [ 48.252481][ T3846] EXT4-fs: Ignoring removed orlov option [ 48.259444][ T3843] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 48.267720][ T3843] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.323920][ T3843] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 48.340067][ T3846] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 48.352050][ T3846] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.99: Abort forced by user [ 48.362709][ T3843] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 48.371356][ T3846] EXT4-fs (loop2): Remounting filesystem read-only [ 48.377973][ T3846] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 48.399019][ T3843] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.98: bg 0: block 40: padding at end of block bitmap is not set [ 48.414367][ T3843] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 48.424015][ T3843] EXT4-fs (loop1): 1 truncate cleaned up [ 48.430373][ T3843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.455157][ T3846] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 48.464693][ T3846] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 48.474108][ T3373] IPVS: starting estimator thread 0... [ 48.516083][ T3863] loop4: detected capacity change from 0 to 1024 [ 48.524846][ T3863] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 48.535883][ T3863] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 48.582588][ T3863] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 48.603672][ T3862] IPVS: using max 2304 ests per chain, 115200 per kthread [ 48.629696][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.640814][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.652139][ T3863] EXT4-fs (loop4): invalid journal inode [ 48.658666][ T3863] EXT4-fs (loop4): can't get journal size [ 48.665670][ T3863] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.102: blocks 2-2 from inode overlap system zone [ 48.680674][ T3863] EXT4-fs (loop4): failed to initialize system zone (-117) [ 48.688562][ T3863] EXT4-fs (loop4): mount failed [ 48.751949][ T3866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 48.788415][ T3866] bond1: entered promiscuous mode [ 48.793645][ T3866] bond1: entered allmulticast mode [ 48.805031][ T3866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.910400][ T3863] Invalid ELF header magic: != ELF [ 49.017144][ T3887] infiniband syz2: set active [ 49.021889][ T3887] infiniband syz2: added veth0_to_bond [ 49.068385][ T3887] RDS/IB: syz2: added [ 49.072469][ T3887] smc: adding ib device syz2 with port count 1 [ 49.079422][ T3887] smc: ib device syz2 port 1 has pnetid [ 49.141602][ T3892] loop2: detected capacity change from 0 to 128 [ 49.254443][ T3892] syz.2.107: attempt to access beyond end of device [ 49.254443][ T3892] loop2: rw=2049, sector=145, nr_sectors = 520 limit=128 [ 49.314799][ T3900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 49.538406][ T3892] syz.2.107: attempt to access beyond end of device [ 49.538406][ T3892] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 49.613413][ T3899] syz.2.107: attempt to access beyond end of device [ 49.613413][ T3899] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 49.637712][ T3892] syz.2.107: attempt to access beyond end of device [ 49.637712][ T3892] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 49.675454][ T3899] syz.2.107: attempt to access beyond end of device [ 49.675454][ T3899] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 49.688674][ T3892] syz.2.107: attempt to access beyond end of device [ 49.688674][ T3892] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 49.701959][ T3899] syz.2.107: attempt to access beyond end of device [ 49.701959][ T3899] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 50.138673][ T3908] loop0: detected capacity change from 0 to 2048 [ 50.164064][ T3908] EXT4-fs: Ignoring removed bh option [ 50.206202][ T3908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.560884][ T3926] loop3: detected capacity change from 0 to 8192 [ 50.627093][ T3919] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.662394][ T3926] loop3: p1 < > p3 < p5 > p4 [ 50.667137][ T3926] loop3: partition table partially beyond EOD, truncated [ 50.674494][ T3926] loop3: p1 start 4294967040 is beyond EOD, truncated [ 50.749994][ T3919] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 50.762408][ T3919] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.762408][ T3919] [ 50.772158][ T3919] EXT4-fs (loop0): Total free blocks count 0 [ 50.778215][ T3919] EXT4-fs (loop0): Free/Dirty block details [ 50.784234][ T3919] EXT4-fs (loop0): free_blocks=2415919104 [ 50.789968][ T3919] EXT4-fs (loop0): dirty_blocks=8224 [ 50.795353][ T3919] EXT4-fs (loop0): Block reservation details [ 50.801355][ T3919] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 50.817435][ T3919] syz.0.113 (3919) used greatest stack depth: 9416 bytes left [ 50.896263][ T1427] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 51.330766][ T2999] loop3: p1 < > p3 < p5 > p4 [ 51.335632][ T2999] loop3: partition table partially beyond EOD, truncated [ 51.430831][ T2999] loop3: p1 start 4294967040 is beyond EOD, truncated [ 51.439046][ T4029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.123'. [ 51.493741][ T4031] SELinux: syz.0.122 (4031) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 51.592345][ T4063] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 51.622071][ T4063] loop0: detected capacity change from 0 to 4096 [ 51.622487][ T4063] ext4: Unknown parameter 'fsname' [ 51.671999][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 51.672017][ T29] audit: type=1400 audit(1740130536.734:1914): avc: denied { name_bind } for pid=4062 comm="syz.0.124" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 51.672085][ T29] audit: type=1400 audit(1740130536.734:1915): avc: denied { node_bind } for pid=4062 comm="syz.0.124" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 51.675192][ T29] audit: type=1326 audit(1740130536.734:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1de5d0a9 code=0x7ffc0000 [ 51.675276][ T29] audit: type=1326 audit(1740130536.734:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3982 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1de5d0a9 code=0x7ffc0000 [ 51.712499][ T29] audit: type=1400 audit(1740130536.764:1918): avc: denied { read } for pid=4072 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.714822][ T2999] loop3: p1 < > p3 < p5 > p4 [ 51.714834][ T2999] loop3: partition table partially beyond EOD, truncated [ 51.714890][ T2999] loop3: p1 start 4294967040 is beyond EOD, truncated [ 51.725609][ T4063] netlink: 'syz.0.124': attribute type 4 has an invalid length. [ 51.727885][ T29] audit: type=1400 audit(1740130536.784:1919): avc: denied { write } for pid=4062 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.795658][ T4075] loop0: detected capacity change from 0 to 1024 [ 51.796002][ T4075] EXT4-fs: Ignoring removed nobh option [ 51.796028][ T4075] EXT4-fs: Ignoring removed bh option [ 51.825101][ T29] audit: type=1326 audit(1740130536.884:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cee4d0a9 code=0x7ffc0000 [ 51.825181][ T29] audit: type=1326 audit(1740130536.884:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f62cee4d0a9 code=0x7ffc0000 [ 51.844890][ T4075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.851018][ T29] audit: type=1400 audit(1740130536.904:1922): avc: denied { remount } for pid=4074 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.878941][ T4075] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 51.882995][ T4081] syz.3.125 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.883877][ T29] audit: type=1400 audit(1740130536.944:1923): avc: denied { read } for pid=4072 comm="syz.3.125" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.204549][ T4077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.204653][ T4077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.330507][ T4085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.127'. [ 52.702469][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.010726][ T4102] loop0: detected capacity change from 0 to 128 [ 53.061257][ T4102] netlink: 'syz.0.133': attribute type 4 has an invalid length. [ 53.151965][ T4105] loop0: detected capacity change from 0 to 256 [ 53.171767][ T4107] loop2: detected capacity change from 0 to 2048 [ 53.179540][ T4105] msdos: Unknown parameter 'dotdots' [ 53.210269][ T4107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.268633][ T4107] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.322166][ T4107] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 53.334667][ T4107] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.334667][ T4107] [ 53.344394][ T4107] EXT4-fs (loop2): Total free blocks count 0 [ 53.350393][ T4107] EXT4-fs (loop2): Free/Dirty block details [ 53.356397][ T4107] EXT4-fs (loop2): free_blocks=2415919104 [ 53.362143][ T4107] EXT4-fs (loop2): dirty_blocks=48 [ 53.367279][ T4107] EXT4-fs (loop2): Block reservation details [ 53.373292][ T4107] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 53.450993][ T4111] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 53.480537][ T4114] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 54.076468][ T4127] loop0: detected capacity change from 0 to 256 [ 54.093530][ T4128] support for cryptoloop has been removed. Use dm-crypt instead. [ 54.187749][ T4130] hub 9-0:1.0: USB hub found [ 54.227118][ T4130] hub 9-0:1.0: 8 ports detected [ 54.349706][ T4131] loop1: detected capacity change from 0 to 2048 [ 54.443910][ T4131] loop1: p1 < > p4 [ 54.448724][ T4131] loop1: p4 size 8388608 extends beyond EOD, truncated [ 54.477233][ T2999] loop1: p1 < > p4 [ 54.481648][ T2999] loop1: p4 size 8388608 extends beyond EOD, truncated [ 54.763031][ T4137] loop3: detected capacity change from 0 to 1024 [ 54.772412][ T4139] loop2: detected capacity change from 0 to 256 [ 54.780653][ T4137] EXT4-fs: Ignoring removed bh option [ 54.788501][ T4139] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 54.798658][ T4139] FAT-fs (loop2): Filesystem has been set read-only [ 54.806683][ T4137] EXT4-fs: inline encryption not supported [ 54.814662][ T4137] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.844006][ T4137] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 54.858928][ T4137] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 2: comm syz.3.140: lblock 2 mapped to illegal pblock 2 (length 1) [ 54.874625][ T4137] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 48: comm syz.3.140: lblock 0 mapped to illegal pblock 48 (length 1) [ 54.889040][ T4137] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.140: Failed to acquire dquot type 0 [ 54.901531][ T4137] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 54.911480][ T4137] EXT4-fs error (device loop3): ext4_evict_inode:256: inode #11: comm syz.3.140: mark_inode_dirty error [ 54.933411][ T4142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.945140][ T4137] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 54.973483][ T4137] EXT4-fs (loop3): 1 orphan inode deleted [ 54.987740][ T4137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.002534][ T50] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 55.020914][ T4142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.063764][ T50] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 55.065257][ T4137] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 16: comm syz.3.140: lblock 0 mapped to illegal pblock 16 (length 1) [ 55.086639][ T4146] netlink: 'syz.1.143': attribute type 13 has an invalid length. [ 55.101627][ T3445] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 55.118827][ T3445] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 0 [ 55.131247][ T4142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.166886][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.216894][ T3304] EXT4-fs error (device loop3): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 55.231096][ T4146] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.240022][ T4146] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.249122][ T4146] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.253630][ T3304] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 55.258104][ T4146] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.298946][ T3304] EXT4-fs error (device loop3): ext4_quota_off:7194: inode #3: comm syz-executor: mark_inode_dirty error [ 55.300118][ T4142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.359400][ T4156] loop3: detected capacity change from 0 to 2048 [ 55.372198][ T4142] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.388564][ T4142] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.399043][ T4157] loop0: detected capacity change from 0 to 128 [ 55.400258][ T4142] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.423156][ T4142] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.432181][ T4156] loop3: p3 p4 < > [ 55.442800][ T2999] loop3: p3 p4 < > [ 55.465992][ T3603] udevd[3603]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 55.488035][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 55.524126][ T3603] udevd[3603]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 55.535257][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 55.559732][ T4160] IPVS: Error connecting to the multicast addr [ 55.569572][ T1427] bio_check_eod: 8864 callbacks suppressed [ 55.569585][ T1427] kworker/u8:5: attempt to access beyond end of device [ 55.569585][ T1427] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 55.633685][ T4163] capability: warning: `syz.2.149' uses 32-bit capabilities (legacy support in use) [ 55.742359][ T4168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.150'. [ 55.752677][ T4175] netlink: 'syz.2.149': attribute type 3 has an invalid length. [ 55.850360][ T4181] loop0: detected capacity change from 0 to 1764 [ 55.874668][ T4179] loop3: detected capacity change from 0 to 1024 [ 55.935872][ T4179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.008670][ T4190] loop2: detected capacity change from 0 to 2048 [ 56.025130][ T4190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.238377][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.679944][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.747849][ T4209] loop2: detected capacity change from 0 to 512 [ 56.760210][ T4209] EXT4-fs: Ignoring removed bh option [ 56.766961][ T4209] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 56.793438][ T4209] EXT4-fs (loop2): 1 truncate cleaned up [ 56.799628][ T4209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.819715][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 56.819751][ T29] audit: type=1400 audit(1740130541.874:2290): avc: denied { setattr } for pid=4208 comm="syz.2.159" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.900167][ T4215] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.159: invalid indirect mapped block 4294901760 (level 0) [ 56.901406][ T4213] loop1: detected capacity change from 0 to 256 [ 56.915585][ T29] audit: type=1400 audit(1740130541.954:2291): avc: denied { remove_name } for pid=4208 comm="syz.2.159" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.942971][ T29] audit: type=1400 audit(1740130541.954:2292): avc: denied { rename } for pid=4208 comm="syz.2.159" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.965299][ T29] audit: type=1400 audit(1740130541.954:2293): avc: denied { unlink } for pid=4208 comm="syz.2.159" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.988072][ T4215] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.159: invalid indirect mapped block 4294967295 (level 1) [ 56.991307][ T29] audit: type=1326 audit(1740130542.054:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.2.159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74d069d0a9 code=0x0 [ 57.030477][ T4215] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.159: invalid indirect mapped block 65535 (level 2) [ 57.045706][ T29] audit: type=1326 audit(1740130542.104:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.2.159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74d069d0a9 code=0x0 [ 57.071109][ T29] audit: type=1326 audit(1740130542.134:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.2.159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74d069d0a9 code=0x0 [ 57.094273][ T29] audit: type=1326 audit(1740130542.154:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.2.159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74d069d0a9 code=0x0 [ 57.180538][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.211468][ T29] audit: type=1326 audit(1740130542.264:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4202 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cee4d0a9 code=0x7fc00000 [ 57.246035][ T4223] futex_wake_op: syz.0.163 tries to shift op by -1; fix this program [ 57.258368][ T4223] loop0: detected capacity change from 0 to 164 [ 57.325160][ T29] audit: type=1326 audit(1740130542.294:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f096d0a9 code=0x7ffc0000 [ 57.346375][ T4229] loop2: detected capacity change from 0 to 512 [ 57.382576][ T4228] xt_CT: No such helper "pptp" [ 57.403758][ T4229] EXT4-fs: test_dummy_encryption option not supported [ 57.622394][ T4241] loop3: detected capacity change from 0 to 512 [ 57.652752][ T4241] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.693994][ T4241] EXT4-fs (loop3): 1 truncate cleaned up [ 57.705470][ T4241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.741188][ T4244] netlink: 128 bytes leftover after parsing attributes in process `syz.2.169'. [ 58.079124][ T4250] loop1: detected capacity change from 0 to 512 [ 58.129482][ T4250] EXT4-fs (loop1): orphan cleanup on readonly fs [ 58.226814][ T4250] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.170: bg 0: block 248: padding at end of block bitmap is not set [ 58.353726][ T4250] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.170: Failed to acquire dquot type 1 [ 58.426408][ T4250] EXT4-fs (loop1): 1 truncate cleaned up [ 58.443917][ T4250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.522937][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.532320][ T4250] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 58.600491][ T4250] syz.1.170 (4250) used greatest stack depth: 9272 bytes left [ 58.648745][ T4266] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.670726][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.728575][ T4270] loop1: detected capacity change from 0 to 512 [ 58.748398][ T4266] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.760444][ T4270] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.174: bg 0: block 248: padding at end of block bitmap is not set [ 58.779171][ T4270] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.174: Failed to acquire dquot type 1 [ 58.791632][ T4270] EXT4-fs (loop1): 1 truncate cleaned up [ 58.799114][ T4270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.812026][ T4270] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.836398][ T4266] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.870084][ T4274] serio: Serial port ptm0 [ 58.877558][ T4270] EXT4-fs error (device loop1): ext4_lookup:1817: inode #2: comm syz.1.174: deleted inode referenced: 12 [ 58.908533][ T4270] EXT4-fs error (device loop1): ext4_lookup:1817: inode #2: comm syz.1.174: deleted inode referenced: 12 [ 58.928930][ T4276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 58.953483][ T4266] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.079650][ T4266] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.121970][ T4266] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.135184][ T4266] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.149516][ T4266] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.560076][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.639988][ T3445] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 59.810321][ T4291] loop0: detected capacity change from 0 to 8192 [ 59.908331][ T4295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.182'. [ 59.956489][ T4295] loop2: detected capacity change from 0 to 512 [ 59.968200][ T4295] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.182: invalid block [ 59.983108][ T4295] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.182: invalid indirect mapped block 4294967295 (level 1) [ 60.012989][ T4297] loop1: detected capacity change from 0 to 1024 [ 60.018332][ T4299] FAT-fs (loop0): error, clusters badly computed (648 != 1) [ 60.020050][ T4291] FAT-fs (loop0): error, clusters badly computed (650 != 649) [ 60.026705][ T4299] FAT-fs (loop0): Filesystem has been set read-only [ 60.035468][ T4291] FAT-fs (loop0): error, clusters badly computed (651 != 650) [ 60.049230][ T4291] FAT-fs (loop0): error, clusters badly computed (652 != 651) [ 60.058105][ T4291] FAT-fs (loop0): error, clusters badly computed (653 != 652) [ 60.063192][ T4295] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.182: invalid indirect mapped block 4294967295 (level 1) [ 60.066937][ T4291] FAT-fs (loop0): error, clusters badly computed (654 != 653) [ 60.088210][ T4291] FAT-fs (loop0): error, clusters badly computed (655 != 654) [ 60.091592][ T4299] FAT-fs (loop0): error, clusters badly computed (655 != 2) [ 60.099299][ T4291] FAT-fs (loop0): error, clusters badly computed (657 != 655) [ 60.112433][ T4291] FAT-fs (loop0): error, clusters badly computed (658 != 656) [ 60.112815][ T4297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.121641][ T4291] FAT-fs (loop0): error, clusters badly computed (659 != 657) [ 60.141247][ T4291] FAT-fs (loop0): error, clusters badly computed (660 != 658) [ 60.147282][ T4295] EXT4-fs (loop2): 2 truncates cleaned up [ 60.149872][ T4291] FAT-fs (loop0): error, clusters badly computed (661 != 659) [ 60.165684][ T4299] FAT-fs (loop0): error, clusters badly computed (661 != 3) [ 60.168176][ T4291] FAT-fs (loop0): error, clusters badly computed (663 != 660) [ 60.173688][ T4295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.182219][ T4291] FAT-fs (loop0): error, clusters badly computed (664 != 661) [ 60.236492][ T4299] FAT-fs (loop0): error, clusters badly computed (664 != 4) [ 60.251842][ T4291] FAT-fs (loop0): error, clusters badly computed (666 != 662) [ 60.257078][ T4299] FAT-fs (loop0): error, clusters badly computed (666 != 5) [ 60.268544][ T4299] FAT-fs (loop0): error, clusters badly computed (667 != 6) [ 60.277658][ T4291] FAT-fs (loop0): error, clusters badly computed (669 != 663) [ 60.285319][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.287720][ T4291] FAT-fs (loop0): error, clusters badly computed (670 != 664) [ 60.304427][ T4299] FAT-fs (loop0): error, clusters badly computed (670 != 7) [ 60.327012][ T4299] FAT-fs (loop0): error, clusters badly computed (671 != 8) [ 60.339957][ T4305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.365103][ T4291] FAT-fs (loop0): error, clusters badly computed (673 != 665) [ 60.380551][ T4305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.386454][ T4306] netlink: 80 bytes leftover after parsing attributes in process `syz.1.183'. [ 60.399076][ T4299] FAT-fs (loop0): error, clusters badly computed (673 != 9) [ 60.410471][ T4305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 60.435802][ T4308] loop3: detected capacity change from 0 to 512 [ 60.443290][ T4291] FAT-fs (loop0): error, clusters badly computed (675 != 666) [ 60.465356][ T4308] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee01c, mo2=0002] [ 60.482322][ T4299] FAT-fs (loop0): error, clusters badly computed (675 != 10) [ 60.490966][ T4308] System zones: 1-12 [ 60.495405][ T4308] EXT4-fs (loop3): orphan cleanup on readonly fs [ 60.503177][ T4291] FAT-fs (loop0): error, clusters badly computed (677 != 667) [ 60.524828][ T4308] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.185: bg 0: block 328: padding at end of block bitmap is not set [ 60.571856][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.583820][ T4308] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 60.625129][ T4313] bond0: (slave bond_slave_0): Releasing backup interface [ 60.627006][ T4308] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.185: invalid indirect mapped block 65280 (level 0) [ 60.647640][ T4313] bond0: (slave bond_slave_1): Releasing backup interface [ 60.661739][ T4313] team0: Port device team_slave_0 removed [ 60.671329][ T4305] loop2: detected capacity change from 0 to 512 [ 60.677907][ T4308] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.185: attempt to clear invalid blocks 33619980 len 1 [ 60.678443][ T4305] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.704200][ T4299] FAT-fs (loop0): error, clusters badly computed (677 != 11) [ 60.712845][ T4299] FAT-fs (loop0): error, clusters badly computed (678 != 12) [ 60.721449][ T4308] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.185: invalid indirect mapped block 1819239214 (level 0) [ 60.724024][ T4291] FAT-fs (loop0): error, clusters badly computed (680 != 668) [ 60.743125][ T4313] team0: Port device team_slave_1 removed [ 60.753495][ T4305] EXT4-fs (loop2): 1 truncate cleaned up [ 60.759570][ T4305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.778239][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.786034][ T4308] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.185: invalid indirect mapped block 1819239214 (level 1) [ 60.800879][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.810167][ T4313] team0: Port device geneve1 removed [ 60.825896][ T4299] FAT-fs (loop0): error, clusters badly computed (680 != 13) [ 60.850428][ T4308] EXT4-fs (loop3): 1 orphan inode deleted [ 60.865921][ T4291] FAT-fs (loop0): error, clusters badly computed (682 != 669) [ 60.874078][ T4317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 60.874632][ T4308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.898047][ T4291] FAT-fs (loop0): error, clusters badly computed (683 != 670) [ 60.905692][ T4299] FAT-fs (loop0): error, clusters badly computed (683 != 14) [ 60.907041][ T4291] FAT-fs (loop0): error, clusters badly computed (685 != 671) [ 60.921923][ T4299] FAT-fs (loop0): error, clusters badly computed (685 != 15) [ 60.940788][ T4308] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 2: comm syz.3.185: lblock 0 mapped to illegal pblock 2 (length 1) [ 60.967370][ T4318] loop1: detected capacity change from 0 to 512 [ 60.975069][ T4308] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.185: error -117 reading directory block [ 60.983161][ T4318] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.015950][ T4318] EXT4-fs: Ignoring removed i_version option [ 61.034561][ T4318] EXT4-fs (loop1): 1 orphan inode deleted [ 61.040991][ T4318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.088036][ T4320] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 61.159943][ T4318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.241721][ T4328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.190'. [ 61.252122][ T4328] syz!: rxe_newlink: already configured on team_slave_0 [ 61.335551][ T3603] udevd[3603]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 61.420943][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.473425][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.662324][ T4336] GPL: port 1(erspan0) entered blocking state [ 61.669351][ T4336] GPL: port 1(erspan0) entered disabled state [ 61.687565][ T4336] erspan0: entered allmulticast mode [ 61.698107][ T4336] erspan0: entered promiscuous mode [ 61.836921][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 61.836951][ T29] audit: type=1400 audit(1740130546.894:2654): avc: denied { bind } for pid=4343 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.908959][ T4344] netlink: 32 bytes leftover after parsing attributes in process `syz.3.194'. [ 61.932051][ T4333] syz.0.191: attempt to access beyond end of device [ 61.932051][ T4333] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 61.991880][ T29] audit: type=1400 audit(1740130546.964:2655): avc: denied { setopt } for pid=4343 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.012466][ T29] audit: type=1400 audit(1740130547.014:2656): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 62.034586][ T29] audit: type=1400 audit(1740130547.014:2657): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.056251][ T29] audit: type=1400 audit(1740130547.014:2658): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.078772][ T29] audit: type=1400 audit(1740130547.014:2659): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.238230][ T29] audit: type=1400 audit(1740130547.274:2660): avc: denied { create } for pid=4347 comm="syz.3.195" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.259457][ T29] audit: type=1400 audit(1740130547.274:2661): avc: denied { map } for pid=4347 comm="syz.3.195" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.283570][ T29] audit: type=1400 audit(1740130547.274:2662): avc: denied { read write } for pid=4347 comm="syz.3.195" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.388638][ T29] audit: type=1326 audit(1740130547.444:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f096d0a9 code=0x7ffc0000 [ 62.469096][ T4355] IPv6: NLM_F_CREATE should be specified when creating new route [ 62.784945][ T4356] loop3: detected capacity change from 0 to 512 [ 62.816231][ T4356] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.862225][ T4363] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.893564][ T4356] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.195: bg 0: block 248: padding at end of block bitmap is not set [ 62.913594][ T4356] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.195: Failed to acquire dquot type 1 [ 62.946595][ T4356] EXT4-fs (loop3): 1 truncate cleaned up [ 62.965038][ T4363] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.029987][ T4348] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 63.044405][ T4348] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 63.055922][ T4363] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.133707][ T4363] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.207254][ T4363] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.232059][ T4363] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.316942][ T4363] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.336927][ T4363] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.464630][ T4377] loop2: detected capacity change from 0 to 512 [ 63.471487][ T4377] EXT4-fs: Ignoring removed i_version option [ 63.477595][ T4377] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.504868][ T4377] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.535830][ T4377] EXT4-fs (loop2): 1 truncate cleaned up [ 63.558768][ T4377] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 63.783224][ T4383] loop2: detected capacity change from 0 to 128 [ 63.802178][ T4383] vfat: Unknown parameter '0xffffffffffffffff' [ 64.261717][ T4394] tipc: Started in network mode [ 64.266761][ T4394] tipc: Node identity 7e6779ce15b6, cluster identity 4711 [ 64.274056][ T4394] tipc: Enabled bearer , priority 0 [ 64.282832][ T4394] +: renamed from syzkaller0 [ 65.137487][ T4394] tipc: Disabling bearer [ 65.198138][ T4388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.301675][ T4411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 65.540039][ T4418] loop2: detected capacity change from 0 to 4096 [ 65.551341][ T4418] ext4: Unknown parameter 'fsname' [ 66.157177][ T4418] loop2: detected capacity change from 0 to 4096 [ 66.332481][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.398162][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.427104][ T4431] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 66.455605][ T4427] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 66.544194][ T4435] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.217'. [ 66.578644][ T4435] netlink: zone id is out of range [ 66.583899][ T4435] netlink: zone id is out of range [ 66.592230][ T4403] chnl_net:caif_netlink_parms(): no params data found [ 66.624045][ T4435] netlink: zone id is out of range [ 66.629322][ T4435] netlink: zone id is out of range [ 66.637928][ T4435] netlink: set zone limit has 8 unknown bytes [ 66.718633][ T4435] wireguard0: entered promiscuous mode [ 66.724423][ T4435] wireguard0: entered allmulticast mode [ 66.744068][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.751224][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.764190][ T4403] bridge_slave_0: entered allmulticast mode [ 66.770666][ T4403] bridge_slave_0: entered promiscuous mode [ 66.780774][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.788003][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.795322][ T4403] bridge_slave_1: entered allmulticast mode [ 66.801958][ T4403] bridge_slave_1: entered promiscuous mode [ 66.817832][ T3445] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.853023][ T4403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.864164][ T4403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.893687][ T3445] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.910661][ T4403] team0: Port device team_slave_0 added [ 66.914599][ T4449] loop3: detected capacity change from 0 to 256 [ 66.927146][ T4403] team0: Port device team_slave_1 added [ 66.937611][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 66.937625][ T29] audit: type=1400 audit(1740130551.994:2808): avc: denied { mount } for pid=4448 comm="syz.3.219" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 66.966159][ T29] audit: type=1400 audit(1740130551.994:2809): avc: denied { bind } for pid=4448 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.992763][ T4450] netlink: 'syz.3.219': attribute type 1 has an invalid length. [ 66.996801][ T4403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.007523][ T4403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.033589][ T4403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.051224][ T3445] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.063102][ T4403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.070139][ T4403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.096295][ T4403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.123142][ T29] audit: type=1400 audit(1740130552.174:2810): avc: denied { listen } for pid=4448 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.156671][ T29] audit: type=1400 audit(1740130552.204:2811): avc: denied { create } for pid=4448 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.187767][ T3445] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.203986][ T4403] hsr_slave_0: entered promiscuous mode [ 67.208642][ T29] audit: type=1400 audit(1740130552.264:2812): avc: denied { write } for pid=4448 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.210523][ T4403] hsr_slave_1: entered promiscuous mode [ 67.229672][ T29] audit: type=1400 audit(1740130552.264:2813): avc: denied { create } for pid=4448 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.229705][ T29] audit: type=1400 audit(1740130552.264:2814): avc: denied { setopt } for pid=4448 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.237336][ T4403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.254608][ T1037] IPVS: starting estimator thread 0... [ 67.288799][ T4403] Cannot create hsr debugfs directory [ 67.336788][ T29] audit: type=1400 audit(1740130552.384:2815): avc: denied { read } for pid=3037 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 67.373634][ T4454] IPVS: using max 2544 ests per chain, 127200 per kthread [ 67.383648][ T29] audit: type=1400 audit(1740130552.434:2816): avc: denied { search } for pid=3037 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.405155][ T29] audit: type=1400 audit(1740130552.434:2817): avc: denied { read } for pid=3037 comm="dhcpcd" name="n25" dev="tmpfs" ino=2319 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.427242][ T3445] bridge_slave_1: left allmulticast mode [ 67.432922][ T3445] bridge_slave_1: left promiscuous mode [ 67.438691][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.474768][ T3302] EXT4-fs unmount: 5 callbacks suppressed [ 67.474782][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.497381][ T3445] bridge_slave_0: left allmulticast mode [ 67.503086][ T3445] bridge_slave_0: left promiscuous mode [ 67.508872][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.600567][ T4477] block device autoloading is deprecated and will be removed. [ 67.609254][ T4477] syz.0.223: attempt to access beyond end of device [ 67.609254][ T4477] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 67.635862][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.659279][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.672198][ T3445] bond0 (unregistering): Released all slaves [ 67.816390][ T4403] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 67.847101][ T4403] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 67.890801][ T4403] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 67.936245][ T4403] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 67.975130][ T4494] wg1 speed is unknown, defaulting to 1000 [ 67.999155][ T3445] hsr_slave_0: left promiscuous mode [ 68.005295][ T3445] hsr_slave_1: left promiscuous mode [ 68.010996][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.018765][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.036055][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.043587][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.071099][ T3445] veth1_macvtap: left promiscuous mode [ 68.076730][ T3445] veth0_macvtap: left promiscuous mode [ 68.082382][ T3445] veth1_vlan: left promiscuous mode [ 68.088600][ T3445] veth0_vlan: left promiscuous mode [ 68.171636][ T3445] team0 (unregistering): Port device team_slave_1 removed [ 68.180945][ T3445] team0 (unregistering): Port device team_slave_0 removed [ 68.213044][ T4494] wg1 speed is unknown, defaulting to 1000 [ 68.222948][ T35] infiniband syz1: ib_query_port failed (-19) [ 68.222950][ T4503] veth1_to_bridge: mtu less than device minimum [ 68.235349][ T4494] wg1 speed is unknown, defaulting to 1000 [ 68.253087][ T4494] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 68.292844][ T4494] wg1 speed is unknown, defaulting to 1000 [ 68.307761][ T4403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.315908][ T4494] wg1 speed is unknown, defaulting to 1000 [ 68.322214][ T4494] wg1 speed is unknown, defaulting to 1000 [ 68.333955][ T4494] wg1 speed is unknown, defaulting to 1000 [ 68.348946][ T4403] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.357888][ T4494] wg1 speed is unknown, defaulting to 1000 [ 68.361584][ T1756] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.370785][ T1756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.378844][ T4494] wg1 speed is unknown, defaulting to 1000 [ 68.396126][ T1756] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.403280][ T1756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.414556][ T4494] wg1 speed is unknown, defaulting to 1000 [ 68.589812][ T4519] loop0: detected capacity change from 0 to 8192 [ 68.609822][ T4403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.649901][ T4539] loop3: detected capacity change from 0 to 128 [ 68.672838][ T4541] netlink: 'syz.2.232': attribute type 4 has an invalid length. [ 68.848632][ T4526] syz.3.231: attempt to access beyond end of device [ 68.848632][ T4526] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 68.909566][ T4539] syz.3.231: attempt to access beyond end of device [ 68.909566][ T4539] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 68.951358][ T4536] wg1 speed is unknown, defaulting to 1000 [ 68.968654][ T4403] veth0_vlan: entered promiscuous mode [ 68.982688][ T4539] syz.3.231: attempt to access beyond end of device [ 68.982688][ T4539] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 69.013082][ T4574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 69.031900][ T4403] veth1_vlan: entered promiscuous mode [ 69.039332][ T4539] syz.3.231: attempt to access beyond end of device [ 69.039332][ T4539] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 69.055838][ T4403] veth0_macvtap: entered promiscuous mode [ 69.062020][ T4539] syz.3.231: attempt to access beyond end of device [ 69.062020][ T4539] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 69.076212][ T4539] syz.3.231: attempt to access beyond end of device [ 69.076212][ T4539] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 69.099366][ T4574] veth1_macvtap: left promiscuous mode [ 69.108546][ T4539] syz.3.231: attempt to access beyond end of device [ 69.108546][ T4539] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 69.122606][ T4539] syz.3.231: attempt to access beyond end of device [ 69.122606][ T4539] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 69.135918][ T4539] syz.3.231: attempt to access beyond end of device [ 69.135918][ T4539] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 69.150682][ T4403] veth1_macvtap: entered promiscuous mode [ 69.197830][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.208428][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.218502][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.228967][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.241716][ T4403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.255842][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.266391][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.276297][ T4403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.286831][ T4403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.298481][ T4403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.342378][ T4403] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.351323][ T4403] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.360134][ T4403] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.368917][ T4403] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.463456][ T4595] loop2: detected capacity change from 0 to 1024 [ 69.475451][ T4595] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.528941][ T4595] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 69.603228][ T4603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 69.634499][ T4590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.643535][ T4590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.689046][ T4590] xt_hashlimit: max too large, truncated to 1048576 [ 69.718942][ T4590] No such timeout policy "syz1" [ 69.774699][ T4613] loop5: detected capacity change from 0 to 2048 [ 69.929982][ T4611] wg1 speed is unknown, defaulting to 1000 [ 70.100653][ T4613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.413697][ T4403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.458223][ T4634] SELinux: policydb string SEºLinuz does not match my string SE Linux [ 70.482380][ T4638] loop5: detected capacity change from 0 to 1024 [ 70.484368][ T4634] SELinux: failed to load policy [ 70.507499][ T4638] EXT4-fs: Ignoring removed nobh option [ 70.513237][ T4638] EXT4-fs: Ignoring removed bh option [ 70.547788][ T4638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.608357][ T4638] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4115: comm syz.5.239: Allocating blocks 497-513 which overlap fs metadata [ 70.629950][ T4634] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 70.641481][ T4638] EXT4-fs (loop5): pa ffff88810699d1c0: logic 256, phys. 385, len 8 [ 70.649566][ T4638] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 70.677592][ T4634] $Hÿ: renamed from bond0 [ 70.684208][ T4634] $Hÿ: entered promiscuous mode [ 70.689376][ T4634] bond_slave_0: entered promiscuous mode [ 70.695185][ T4634] bond_slave_1: entered promiscuous mode [ 70.754986][ T4663] loop0: detected capacity change from 0 to 512 [ 70.775885][ T4663] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.242: bg 0: block 248: padding at end of block bitmap is not set [ 70.835499][ T4663] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.242: Failed to acquire dquot type 1 [ 70.867931][ T4663] EXT4-fs (loop0): 1 truncate cleaned up [ 70.875348][ T4403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.886334][ T4663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.909335][ T4663] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.927143][ T4692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.245'. [ 70.936235][ T4663] EXT4-fs error (device loop0): ext4_lookup:1817: inode #2: comm syz.0.242: deleted inode referenced: 12 [ 70.948042][ T4692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.955563][ T4692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.965308][ T4692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.972744][ T4692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.985598][ T4694] loop3: detected capacity change from 0 to 2048 [ 71.034963][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.047006][ T4687] random: crng reseeded on system resumption [ 71.074983][ T4700] loop0: detected capacity change from 0 to 512 [ 71.081862][ T4700] ext4: Unknown parameter 'euid' [ 71.197442][ T4704] netlink: 132 bytes leftover after parsing attributes in process `syz.3.247'. [ 71.214994][ T4704] ext2: Invalid gid '0x00000000ffffffff' [ 71.478820][ T4710] wg1 speed is unknown, defaulting to 1000 [ 71.719983][ T4715] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 71.770788][ T4720] netlink: 'syz.2.250': attribute type 13 has an invalid length. [ 71.832079][ T4725] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.854367][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.898499][ T4720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.909482][ T4720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.935869][ T4730] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 71.946112][ T29] kauditd_printk_skb: 523 callbacks suppressed [ 71.946126][ T29] audit: type=1400 audit(1740130557.004:3339): avc: denied { relabelto } for pid=4726 comm="syz.3.252" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 71.979344][ T29] audit: type=1400 audit(1740130557.004:3340): avc: denied { associate } for pid=4726 comm="syz.3.252" name="cgroup.procs" dev="cgroup" ino=151 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:net_conf_t:s0" [ 72.024243][ T4720] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.029386][ T4732] loop0: detected capacity change from 0 to 1024 [ 72.032617][ T4720] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.041582][ T4732] EXT4-fs: test_dummy_encryption option not supported [ 72.047353][ T4720] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.062513][ T4720] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.108779][ T4723] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 72.162504][ T29] audit: type=1400 audit(1740130557.214:3341): avc: denied { create } for pid=4733 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 72.207262][ T4739] netlink: 68 bytes leftover after parsing attributes in process `syz.2.255'. [ 72.304673][ T4742] loop0: detected capacity change from 0 to 1024 [ 72.311668][ T4742] EXT4-fs: Ignoring removed nobh option [ 72.317244][ T4742] EXT4-fs: Ignoring removed bh option [ 72.336412][ T4742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.362842][ T29] audit: type=1400 audit(1740130557.384:3342): avc: denied { bind } for pid=4738 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.382210][ T29] audit: type=1400 audit(1740130557.384:3343): avc: denied { setopt } for pid=4738 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.401543][ T29] audit: type=1400 audit(1740130557.414:3344): avc: denied { ioctl } for pid=4738 comm="syz.2.255" path="socket:[8797]" dev="sockfs" ino=8797 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.426391][ T29] audit: type=1326 audit(1740130557.414:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.2.255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74d069d0a9 code=0x0 [ 72.700486][ T29] audit: type=1326 audit(1740130557.754:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cee4d0a9 code=0x7ffc0000 [ 72.723950][ T29] audit: type=1326 audit(1740130557.754:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cee4d0a9 code=0x7ffc0000 [ 72.725750][ T4750] loop3: detected capacity change from 0 to 2048 [ 72.747558][ T29] audit: type=1326 audit(1740130557.764:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62cee4d0a9 code=0x7ffc0000 [ 72.795103][ T4750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.811318][ T4750] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 102 with max blocks 1 with error 28 [ 72.823814][ T4750] EXT4-fs (loop3): This should not happen!! Data will be lost [ 72.823814][ T4750] [ 72.833487][ T4750] EXT4-fs (loop3): Total free blocks count 0 [ 72.839492][ T4750] EXT4-fs (loop3): Free/Dirty block details [ 72.845406][ T4750] EXT4-fs (loop3): free_blocks=0 [ 72.850343][ T4750] EXT4-fs (loop3): dirty_blocks=0 [ 72.855384][ T4750] EXT4-fs (loop3): Block reservation details [ 72.861373][ T4750] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 72.891444][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.927117][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.934647][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.942067][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.950881][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.960013][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.967429][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.974861][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.982254][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.989718][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.997135][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.004527][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.011948][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.019402][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.026819][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.034234][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.043600][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.051017][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.058464][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.065878][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.073274][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.080714][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.088307][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.095781][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.103181][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.110602][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.118072][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.125560][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.132998][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.140466][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.147875][ T1037] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.155940][ T1037] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 73.158221][ T4762] netlink: 'syz.0.258': attribute type 27 has an invalid length. [ 73.187316][ T4758] loop3: detected capacity change from 0 to 512 [ 73.210112][ T4758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.211904][ T4764] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4764 comm=syz.1.260 [ 73.236631][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.243949][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.251753][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 73.265273][ T4758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.278124][ T4758] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.309671][ T4771] loop5: detected capacity change from 0 to 1024 [ 73.314226][ T4762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.326130][ T4762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.346402][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.370178][ T4773] SELinux: security_context_str_to_sid (ÿ) failed with errno=-22 [ 73.379961][ T4762] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.388431][ T4762] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.396888][ T4762] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.405326][ T4762] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.428464][ T4765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.437295][ T4765] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.448069][ T4765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.509929][ T4780] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 73.873857][ T4786] support for cryptoloop has been removed. Use dm-crypt instead. [ 73.978772][ T4789] loop3: detected capacity change from 0 to 512 [ 74.009480][ T4789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.024856][ T4789] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.041378][ T4789] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.266: corrupted inode contents [ 74.055579][ T4789] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.266: mark_inode_dirty error [ 74.067137][ T4789] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.266: corrupted inode contents [ 74.080565][ T4789] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.266: mark_inode_dirty error [ 74.102751][ T4789] netlink: 60 bytes leftover after parsing attributes in process `syz.3.266'. [ 74.111858][ T4789] unsupported nlmsg_type 40 [ 74.190721][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.215608][ T4797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.267'. [ 74.313945][ T4804] loop3: detected capacity change from 0 to 1024 [ 74.322011][ T4804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.341561][ T4804] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 74.343382][ T4806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.359862][ T4806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.382295][ T4806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.271'. [ 74.510006][ T4813] veth1_to_bridge: entered allmulticast mode [ 74.526270][ T4813] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 74.535006][ T4813] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 74.577600][ T4813] syzkaller1: entered promiscuous mode [ 74.579614][ T4819] loop5: detected capacity change from 0 to 2048 [ 74.583103][ T4813] syzkaller1: entered allmulticast mode [ 74.601777][ T4822] netlink: 'syz.3.275': attribute type 27 has an invalid length. [ 74.619459][ T4822] $Hÿ: left promiscuous mode [ 74.624442][ T4822] bond_slave_0: left promiscuous mode [ 74.625137][ T4815] random: crng reseeded on system resumption [ 74.630144][ T4822] bond_slave_1: left promiscuous mode [ 74.674294][ T4823] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 74.682261][ T4823] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.691767][ T4823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.794604][ T4827] loop5: detected capacity change from 0 to 8192 [ 74.933999][ T4828] wg1 speed is unknown, defaulting to 1000 [ 75.222359][ T4837] loop2: detected capacity change from 0 to 1024 [ 75.312235][ T4843] netlink: zone id is out of range [ 75.317454][ T4843] netlink: zone id is out of range [ 75.322780][ T4843] netlink: zone id is out of range [ 75.328441][ T4843] netlink: zone id is out of range [ 75.337206][ T4844] blackhole_netdev_xmit(): Dropping skb. [ 75.342925][ T4844] blackhole_netdev_xmit(): Dropping skb. [ 75.346130][ T4843] netlink: set zone limit has 8 unknown bytes [ 75.416595][ T4845] wireguard0: entered promiscuous mode [ 75.422113][ T4845] wireguard0: entered allmulticast mode [ 75.430439][ T4843] wg1 speed is unknown, defaulting to 1000 [ 75.890165][ T4848] __nla_validate_parse: 6 callbacks suppressed [ 75.890185][ T4848] netlink: 24 bytes leftover after parsing attributes in process `syz.5.281'. [ 76.078459][ T4853] syz.2.283 uses obsolete (PF_INET,SOCK_PACKET) [ 76.098493][ T4854] loop5: detected capacity change from 0 to 512 [ 76.139534][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 76.181718][ T4854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.202943][ T3375] IPVS: starting estimator thread 0... [ 76.227511][ T4854] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.395392][ T4863] IPVS: using max 2352 ests per chain, 117600 per kthread [ 76.513575][ T4869] support for cryptoloop has been removed. Use dm-crypt instead. [ 77.104044][ T4862] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 77.125228][ T4403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.163112][ T29] kauditd_printk_skb: 809 callbacks suppressed [ 77.163187][ T29] audit: type=1400 audit(1740130562.214:4158): avc: denied { ioctl } for pid=4880 comm="syz.2.298" path="socket:[9218]" dev="sockfs" ino=9218 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 77.194967][ T29] audit: type=1326 audit(1740130562.214:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 77.218378][ T29] audit: type=1326 audit(1740130562.214:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 77.254800][ T29] audit: type=1326 audit(1740130562.264:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 77.278240][ T29] audit: type=1326 audit(1740130562.264:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 77.301584][ T29] audit: type=1326 audit(1740130562.264:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 77.323884][ T4896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.298'. [ 77.324985][ T29] audit: type=1326 audit(1740130562.264:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 77.335075][ T4890] loop5: detected capacity change from 0 to 1024 [ 77.357222][ T29] audit: type=1326 audit(1740130562.264:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 77.357307][ T29] audit: type=1326 audit(1740130562.264:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 77.357417][ T29] audit: type=1326 audit(1740130562.264:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d069d0a9 code=0x7ffc0000 [ 77.440379][ T4890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.459265][ T4898] loop3: detected capacity change from 0 to 2048 [ 77.459830][ T4890] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 77.604379][ T4911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 77.659304][ T4911] bio_check_eod: 6154 callbacks suppressed [ 77.659325][ T4911] +}[@: attempt to access beyond end of device [ 77.659325][ T4911] loop3: rw=0, sector=1552, nr_sectors = 512 limit=2048 [ 77.700938][ T4910] loop2: detected capacity change from 0 to 8192 [ 77.840667][ T4919] syz.0.301: attempt to access beyond end of device [ 77.840667][ T4919] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 77.881395][ T4910] FAT-fs (loop2): error, clusters badly computed (278 != 1) [ 77.888843][ T4910] FAT-fs (loop2): Filesystem has been set read-only [ 77.923550][ T4907] FAT-fs (loop2): error, clusters badly computed (280 != 279) [ 77.931731][ T4907] FAT-fs (loop2): error, clusters badly computed (281 != 280) [ 77.953742][ T4910] FAT-fs (loop2): error, clusters badly computed (281 != 2) [ 77.961839][ T4910] FAT-fs (loop2): error, clusters badly computed (282 != 3) [ 77.964248][ T4928] netlink: 132 bytes leftover after parsing attributes in process `syz.1.292'. [ 77.970726][ T4910] FAT-fs (loop2): error, clusters badly computed (283 != 4) [ 77.981424][ T4907] FAT-fs (loop2): error, clusters badly computed (285 != 281) [ 77.995898][ T4910] FAT-fs (loop2): error, clusters badly computed (285 != 5) [ 77.999777][ T4907] FAT-fs (loop2): error, clusters badly computed (287 != 282) [ 78.004733][ T4910] FAT-fs (loop2): error, clusters badly computed (287 != 6) [ 78.019656][ T4910] FAT-fs (loop2): error, clusters badly computed (288 != 7) [ 78.021439][ T4907] FAT-fs (loop2): error, clusters badly computed (290 != 283) [ 78.035904][ T4907] FAT-fs (loop2): error, clusters badly computed (291 != 284) [ 78.058567][ T4931] loop3: detected capacity change from 0 to 512 [ 78.069465][ T4931] ext4: Unknown parameter 'euid' [ 78.078267][ T4907] FAT-fs (loop2): error, clusters badly computed (292 != 285) [ 78.087028][ T4907] FAT-fs (loop2): error, clusters badly computed (293 != 286) [ 78.095913][ T4910] FAT-fs (loop2): error, clusters badly computed (293 != 8) [ 78.104242][ T4907] FAT-fs (loop2): error, clusters badly computed (295 != 287) [ 78.121651][ T4910] FAT-fs (loop2): error, clusters badly computed (295 != 9) [ 78.129836][ T4907] FAT-fs (loop2): error, clusters badly computed (297 != 288) [ 78.138393][ T4910] FAT-fs (loop2): error, clusters badly computed (297 != 10) [ 78.146633][ T4907] FAT-fs (loop2): error, clusters badly computed (299 != 289) [ 78.156413][ T4910] FAT-fs (loop2): error, clusters badly computed (299 != 11) [ 78.165001][ T4907] FAT-fs (loop2): error, clusters badly computed (301 != 290) [ 78.173325][ T4910] FAT-fs (loop2): error, clusters badly computed (301 != 12) [ 78.181674][ T4907] FAT-fs (loop2): error, clusters badly computed (303 != 291) [ 78.220348][ T4910] FAT-fs (loop2): error, clusters badly computed (303 != 13) [ 78.234030][ T4907] FAT-fs (loop2): error, clusters badly computed (305 != 292) [ 78.242227][ T4907] FAT-fs (loop2): error, clusters badly computed (306 != 293) [ 78.250461][ T4907] FAT-fs (loop2): error, clusters badly computed (307 != 294) [ 78.258659][ T4907] FAT-fs (loop2): error, clusters badly computed (308 != 295) [ 78.267514][ T4907] FAT-fs (loop2): error, clusters badly computed (309 != 296) [ 78.276233][ T4907] FAT-fs (loop2): error, clusters badly computed (310 != 297) [ 78.293514][ T4910] FAT-fs (loop2): error, clusters badly computed (310 != 14) [ 78.301630][ T4907] FAT-fs (loop2): error, clusters badly computed (312 != 298) [ 78.310198][ T4910] FAT-fs (loop2): error, clusters badly computed (312 != 15) [ 78.326142][ T4907] FAT-fs (loop2): error, clusters badly computed (314 != 299) [ 78.469663][ T4938] wg1 speed is unknown, defaulting to 1000 [ 78.602142][ T4910] FAT-fs (loop2): error, clusters badly computed (314 != 16) [ 78.614358][ T4940] loop0: detected capacity change from 0 to 1024 [ 78.726707][ T4907] FAT-fs (loop2): error, clusters badly computed (316 != 300) [ 78.831808][ T4941] net_ratelimit: 604 callbacks suppressed [ 78.831843][ T4941] blackhole_netdev_xmit(): Dropping skb. [ 78.843271][ T4941] blackhole_netdev_xmit(): Dropping skb. [ 78.848961][ T4941] blackhole_netdev_xmit(): Dropping skb. [ 78.851326][ T4910] FAT-fs (loop2): error, clusters badly computed (316 != 17) [ 78.854684][ T4941] blackhole_netdev_xmit(): Dropping skb. [ 78.862569][ T4910] FAT-fs (loop2): error, clusters badly computed (317 != 18) [ 78.867632][ T4941] blackhole_netdev_xmit(): Dropping skb. [ 78.876048][ T4910] FAT-fs (loop2): error, clusters badly computed (318 != 19) [ 78.880644][ T4941] blackhole_netdev_xmit(): Dropping skb. [ 78.888938][ T4910] FAT-fs (loop2): error, clusters badly computed (319 != 20) [ 78.893652][ T4941] blackhole_netdev_xmit(): Dropping skb. [ 78.901533][ T4910] FAT-fs (loop2): error, clusters badly computed (320 != 21) [ 78.906692][ T4941] blackhole_netdev_xmit(): Dropping skb. [ 78.906710][ T4941] blackhole_netdev_xmit(): Dropping skb. [ 78.906725][ T4941] blackhole_netdev_xmit(): Dropping skb. [ 78.919269][ T4907] FAT-fs (loop2): error, clusters badly computed (322 != 301) [ 78.939696][ T4907] FAT-fs (loop2): error, clusters badly computed (323 != 302) [ 78.947817][ T4907] FAT-fs (loop2): error, clusters badly computed (324 != 303) [ 79.004887][ T4907] FAT-fs (loop2): error, clusters badly computed (325 != 304) [ 79.030165][ T4910] FAT-fs (loop2): error, clusters badly computed (325 != 22) [ 79.064738][ T4907] FAT-fs (loop2): error, clusters badly computed (327 != 305) [ 79.072842][ T4907] FAT-fs (loop2): error, clusters badly computed (328 != 306) [ 79.120436][ T4910] FAT-fs (loop2): error, clusters badly computed (328 != 23) [ 79.134429][ T4910] FAT-fs (loop2): error, clusters badly computed (329 != 24) [ 79.148123][ T4910] FAT-fs (loop2): error, clusters badly computed (330 != 25) [ 79.188381][ T4907] FAT-fs (loop2): error, clusters badly computed (332 != 307) [ 79.224640][ T4910] FAT-fs (loop2): error, clusters badly computed (332 != 26) [ 79.233094][ T4907] FAT-fs (loop2): error, clusters badly computed (334 != 308) [ 79.240854][ T4910] FAT-fs (loop2): error, clusters badly computed (334 != 27) [ 79.249175][ T4910] FAT-fs (loop2): error, clusters badly computed (335 != 28) [ 79.283587][ T4910] FAT-fs (loop2): error, clusters badly computed (336 != 29) [ 79.291680][ T4910] FAT-fs (loop2): error, clusters badly computed (337 != 30) [ 79.314210][ T4910] FAT-fs (loop2): error, clusters badly computed (338 != 31) [ 79.344540][ T4907] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2074) [ 79.545567][ T4964] smc: net device bond0 applied user defined pnetid SYZ0 [ 79.569498][ T4964] smc: net device bond0 erased user defined pnetid SYZ0 [ 79.804517][ T4959] $Hÿ: renamed from bond0 (while UP) [ 79.844217][ T4959] $Hÿ: entered promiscuous mode [ 79.849275][ T4959] bond_slave_0: entered promiscuous mode [ 79.855216][ T4959] bond_slave_1: entered promiscuous mode [ 79.907139][ T4971] loop0: detected capacity change from 0 to 1024 [ 79.970899][ T4971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.986637][ T4973] loop2: detected capacity change from 0 to 164 [ 80.117817][ T4971] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 80.140232][ T4984] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 80.153992][ T4971] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 80.164650][ T4984] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 80.166203][ T4971] EXT4-fs (loop0): This should not happen!! Data will be lost [ 80.166203][ T4971] [ 80.186273][ T4971] EXT4-fs (loop0): Total free blocks count 0 [ 80.192278][ T4971] EXT4-fs (loop0): Free/Dirty block details [ 80.194996][ T4984] SELinux: syz.2.307 (4984) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 80.198253][ T4971] EXT4-fs (loop0): free_blocks=68451041280 [ 80.217544][ T4971] EXT4-fs (loop0): dirty_blocks=16 [ 80.222661][ T4971] EXT4-fs (loop0): Block reservation details [ 80.228770][ T4971] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 80.235447][ T4979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.253805][ T4979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.272609][ T4979] xt_hashlimit: max too large, truncated to 1048576 [ 80.279650][ T4979] No such timeout policy "syz1" [ 80.302690][ T4991] 9pnet_fd: Insufficient options for proto=fd [ 80.398669][ T4995] SELinux: security_context_str_to_sid (ÿ) failed with errno=-22 [ 80.412725][ T4995] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.429257][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.466240][ T4995] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.528746][ T4998] loop2: detected capacity change from 0 to 512 [ 80.627031][ T4998] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 80.627268][ T4995] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.645015][ T4998] EXT4-fs (loop2): 1 truncate cleaned up [ 80.651420][ T4998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.798218][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.809285][ T4995] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.858814][ T5012] loop3: detected capacity change from 0 to 512 [ 80.870986][ T5012] EXT4-fs: Ignoring removed bh option [ 80.893392][ T5012] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.931144][ T4995] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.986276][ T4995] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.006320][ T5012] EXT4-fs (loop3): 1 truncate cleaned up [ 81.018859][ T5012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.052751][ T4995] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.114026][ T4995] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.160270][ T5012] wg2: entered promiscuous mode [ 81.165201][ T5012] wg2: entered allmulticast mode [ 81.488026][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.573121][ T5023] loop2: detected capacity change from 0 to 512 [ 81.608102][ T5019] loop3: detected capacity change from 0 to 512 [ 81.619170][ T5019] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.638290][ T5019] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.315: invalid indirect mapped block 4294967295 (level 1) [ 81.639405][ T5023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.703177][ T5019] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.315: invalid indirect mapped block 4294967295 (level 1) [ 81.749322][ T5023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 81.837191][ T5019] EXT4-fs (loop3): 2 truncates cleaned up [ 81.855660][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.869575][ T5019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.113453][ T5078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'. [ 82.124908][ T5078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 82.143321][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.168208][ T29] kauditd_printk_skb: 554 callbacks suppressed [ 82.168223][ T29] audit: type=1326 audit(1740130567.224:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26f0964067 code=0x7ffc0000 [ 82.197730][ T29] audit: type=1326 audit(1740130567.224:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26f0909299 code=0x7ffc0000 [ 82.223944][ T29] audit: type=1326 audit(1740130567.224:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f096d0a9 code=0x7ffc0000 [ 82.247299][ T29] audit: type=1326 audit(1740130567.234:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26f0964067 code=0x7ffc0000 [ 82.270579][ T29] audit: type=1326 audit(1740130567.234:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26f0909299 code=0x7ffc0000 [ 82.293875][ T29] audit: type=1326 audit(1740130567.234:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f096d0a9 code=0x7ffc0000 [ 82.317219][ T29] audit: type=1326 audit(1740130567.234:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26f0964067 code=0x7ffc0000 [ 82.340515][ T29] audit: type=1326 audit(1740130567.234:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26f0909299 code=0x7ffc0000 [ 82.363801][ T29] audit: type=1326 audit(1740130567.234:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f096d0a9 code=0x7ffc0000 [ 82.387087][ T29] audit: type=1326 audit(1740130567.264:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.0.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f26f0964067 code=0x7ffc0000 [ 82.576217][ T5103] loop5: detected capacity change from 0 to 512 [ 82.595917][ T5105] loop3: detected capacity change from 0 to 512 [ 82.618471][ T5103] EXT4-fs (loop5): 1 orphan inode deleted [ 82.638145][ T5105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.645138][ T5097] loop0: detected capacity change from 0 to 8192 [ 82.650997][ T3445] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 82.657523][ T5103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.678560][ T5105] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.691599][ T5097] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿ' [ 82.719753][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.753943][ T5103] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.818603][ T5123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.869435][ T5123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.884487][ T5123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.326'. [ 82.914724][ T5135] vlan2: entered allmulticast mode [ 83.063124][ T4403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.136488][ T5139] loop5: detected capacity change from 0 to 512 [ 83.164242][ T5139] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 83.172182][ T5139] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c028, mo2=0002] [ 83.198587][ T5139] System zones: 0-1, 15-15, 18-18, 34-34 [ 83.204712][ T5139] EXT4-fs (loop5): orphan cleanup on readonly fs [ 83.211217][ T5123] loop3: detected capacity change from 0 to 512 [ 83.211240][ T5139] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.224322][ T5123] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.232427][ T5139] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 83.248476][ T5123] EXT4-fs (loop3): 1 truncate cleaned up [ 83.254980][ T5123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.255455][ T5139] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.328: bg 0: block 40: padding at end of block bitmap is not set [ 83.282361][ T5139] EXT4-fs (loop5): Remounting filesystem read-only [ 83.289050][ T5139] EXT4-fs (loop5): 1 truncate cleaned up [ 83.295127][ T5139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.307586][ T5139] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 83.314872][ T5139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.451320][ T5139] bond1: entered promiscuous mode [ 83.456453][ T5139] bond1: entered allmulticast mode [ 83.467602][ T5139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.488049][ T5139] bond1 (unregistering): Released all slaves [ 83.585968][ T5171] loop2: detected capacity change from 0 to 512 [ 83.598576][ T3603] ================================================================== [ 83.606766][ T3603] BUG: KCSAN: data-race in do_mpage_readpage / set_blocksize [ 83.614166][ T3603] [ 83.616489][ T3603] write to 0xffff8881004c16ee of 1 bytes by task 5171 on cpu 1: [ 83.624115][ T3603] set_blocksize+0x218/0x270 [ 83.628713][ T3603] sb_min_blocksize+0x63/0xe0 [ 83.633391][ T3603] ext4_fill_super+0x38b/0x3630 [ 83.638245][ T3603] get_tree_bdev_flags+0x29f/0x310 [ 83.643363][ T3603] get_tree_bdev+0x1f/0x30 [ 83.647783][ T3603] ext4_get_tree+0x1c/0x30 [ 83.652200][ T3603] vfs_get_tree+0x56/0x1e0 [ 83.656625][ T3603] do_new_mount+0x227/0x690 [ 83.661156][ T3603] path_mount+0x49b/0xb30 [ 83.665492][ T3603] __se_sys_mount+0x27f/0x2d0 [ 83.670174][ T3603] __x64_sys_mount+0x67/0x80 [ 83.674761][ T3603] x64_sys_call+0x2c84/0x2dc0 [ 83.679435][ T3603] do_syscall_64+0xc9/0x1c0 [ 83.683945][ T3603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.689842][ T3603] [ 83.692158][ T3603] read to 0xffff8881004c16ee of 1 bytes by task 3603 on cpu 0: [ 83.699696][ T3603] do_mpage_readpage+0x55/0xcb0 [ 83.704552][ T3603] mpage_readahead+0x1ad/0x2d0 [ 83.709321][ T3603] blkdev_readahead+0x1c/0x30 [ 83.714005][ T3603] read_pages+0x9e/0x460 [ 83.718248][ T3603] page_cache_ra_unbounded+0x30d/0x350 [ 83.723715][ T3603] page_cache_sync_ra+0x252/0x680 [ 83.728762][ T3603] filemap_get_pages+0x2ca/0x11a0 [ 83.733781][ T3603] filemap_read+0x230/0x8c0 [ 83.738276][ T3603] blkdev_read_iter+0x228/0x2d0 [ 83.743135][ T3603] vfs_read+0x5cc/0x6f0 [ 83.747288][ T3603] ksys_read+0xe8/0x1b0 [ 83.751436][ T3603] __x64_sys_read+0x42/0x50 [ 83.755955][ T3603] x64_sys_call+0x2874/0x2dc0 [ 83.760631][ T3603] do_syscall_64+0xc9/0x1c0 [ 83.765133][ T3603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.771030][ T3603] [ 83.773344][ T3603] value changed: 0x0c -> 0x0a [ 83.778005][ T3603] [ 83.780318][ T3603] Reported by Kernel Concurrency Sanitizer on: [ 83.786465][ T3603] CPU: 0 UID: 0 PID: 3603 Comm: udevd Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0 [ 83.796720][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 83.806790][ T3603] ================================================================== [ 83.816527][ T5168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.331'. [ 83.860079][ T5171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.873641][ T5171] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.968235][ T5191] netlink: 'syz.2.332': attribute type 10 has an invalid length. [ 83.977105][ T5191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.985895][ T5191] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 84.027964][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.427097][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.