last executing test programs: 4.721230592s ago: executing program 3 (id=640): r0 = socket(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0xc) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="2c00000100663d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x2, &(0x7f0000000000)=""/245, &(0x7f0000000100)=0xf5) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000000c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r10, r10, 0x0, 0x800000009) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0xc, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfffffffd, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x0, 0x0, @remote, 0x3}, {0xa, 0x4e22, 0x0, @mcast1}, 0x1}, 0x5c) 3.414696171s ago: executing program 4 (id=649): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x494, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r2, r3, 0x0) read(r0, &(0x7f00000005c0)=""/4096, 0x1000) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/133, 0xcd}], 0x1, 0xa6, 0x200) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x3, 0xffffffff, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r10}, 0x18) r11 = dup(r9) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x10, 0x5e, 0x0, 0x4, 0x0, 0x2, 0x8001, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0x6}, 0x1820, 0x4, 0x8, 0x3, 0x80000001, 0x4, 0x2eb9, 0x0, 0xd205, 0x0, 0x8}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xa) write$P9_RLERRORu(r11, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r11, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) 3.347393132s ago: executing program 3 (id=650): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000a389aec500000003000000000000000000000000000000000000b098b5e9abf494b710c95841227e9c6fe021f5849a69001005c41348686feb429b1aa7f9bc36bf9cc6720851d8ffc0f8eb63a1f8bce417df213877559a21fd1277efa4650000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000f60018120000", @ANYRES16=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f00000015c0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x400000000000045c], 0x0, 0xffffffffff600000, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='block_rq_requeue\x00', r4, 0x0, 0x5}, 0x18) r6 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r7, 0xa, 0x12) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x12, &(0x7f0000004900), 0x4) syz_clone3(&(0x7f0000000ac0)={0x4340600, &(0x7f0000000840)=0xffffffffffffffff, &(0x7f0000000880), &(0x7f00000008c0), {0x2a}, &(0x7f0000000900)=""/35, 0x23, &(0x7f0000000a00)=""/169, &(0x7f0000000940)=[r6, r6], 0x2}, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000140)='./file0\x00', r11, 0xee00) fstat(0xffffffffffffffff, &(0x7f0000000b40)) getresuid(&(0x7f0000000980), &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)) r13 = gettid() lstat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getgid() sendmsg$unix(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="34000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r7, @ANYRES32, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r10, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=r6, @ANYRES32=r11, @ANYRES32=r6, @ANYRES32=r12, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15], 0xc0}, 0x10) r16 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x5, &(0x7f00000007c0)=[{0x80, 0xd, 0x7, 0x8}, {0x1, 0x7, 0xc, 0x1ff}, {0xe, 0x6, 0xce, 0x1}, {0x1000, 0xa, 0x3, 0x5}, {0x1, 0x8, 0xff, 0x208007}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r16, 0xc0502100, &(0x7f0000000340)) 3.108492635s ago: executing program 1 (id=652): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067726574617000001c00028006000e0002000000060010004e1d000008000700ac14142808000a00", @ANYRES32=r4, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f00000007c0)={0x2, 'team_slave_0\x00', 0x3}, 0x18) sendmmsg$unix(r6, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r11, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff0500030001000000060001000200000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r12, @ANYBLOB="240003"], 0x10e0}}, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x7, 0x4e23, 0x100, 0xa, 0x90, 0xa0, 0x6, r12, r13}, {0x9, 0x23, 0x3, 0x8, 0x3, 0x2, 0x5, 0xfffffffffffffffe}, {0x7fff, 0x40, 0x8, 0x1}, 0x0, 0x6e6bb9, 0x2, 0x1, 0x2, 0x3}, {{@in=@local, 0x4d2, 0x32}, 0xa, @in6=@mcast2, 0x3500, 0x3, 0x0, 0x6, 0x75c, 0x7fffffff, 0x5}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a2c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x2003ff, 0x5, 0x9, 0x7, 0xb7, 0x9, 0x36b, 0x9, 0x4, 0x7ff, 0x1a, 0x1e, 0x7, 0xa, 0xa, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000003000000000000000000000300000000030000000200000003000000020000000000000e020000000207000000000e0000000000000a050000000300000000690900000000000000000000000011030000000a000000080000000000001205000000005f00"], &(0x7f0000000480)=""/156, 0x83, 0x9c, 0x1, 0x2, 0x10000, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffff00000000000000000f0000000000000c00ec01cb601c48d8456f08358c2ffdefa693dfc940fe61162dbb57ec16b2cae3e20fe286f7d1c5dc85de", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=r14, @ANYRES32=r15], 0x50) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r16, 0x0, 0x400000, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r16, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x7c, 0x0, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7fffffff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xd64}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x49cb}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8004040}, 0x20000000) 2.932589878s ago: executing program 1 (id=653): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x408400, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000e40)={0x0, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000001340)={0x0, 0x7b5, 0xfffffff8, {0xfffffffc, 0xfffffffd}, 0xfffffff7, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x43}, 0x3}}, 0x10, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000004000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESOCT=r4], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004) getdents64(r1, &(0x7f0000000600)=""/38, 0x26) getdents64(r1, 0xfffffffffffffffe, 0x29) r12 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r12}}, 0x58) 2.875141069s ago: executing program 3 (id=655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003b80)=@deltfilter={0x2518, 0x2d, 0x8, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x6}, {0x3, 0xfff1}, {0x0, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x128, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'vxcan1\x00'}, @TCA_FW_ACT={0xe0, 0x4, [@m_mirred={0xdc, 0x1d, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xd27, 0xffffffffffffffff, 0xfff, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7f, 0x0, 0x1, 0xff}, 0x2}}]}, {0x6d, 0x6, "582cc0eb98b758dabe4eeccbb6d54731e1661371b20c6a9720dfc57eb4715490a08c0c4fdc5f6b7d8528d6063b1c48c3806db97673976928a5b13e9edfb3f048c2085efd9feeca604b923add9e809c95e98b39ce5f1a69f00aa01cc9b135a6f3f0d7a95f2016275c3d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'pim6reg0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0xba09}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0xfffffff6}, @filter_kind_options=@f_matchall={{0xd}, {0x2354, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xa}}, @TCA_MATCHALL_ACT={0x2340, 0x2, [@m_pedit={0x1098, 0x1f, 0x0, 0x0, {{0xa}, {0x1064, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x4}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x130, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xef8, 0x4, {{{0x7, 0x13, 0x7, 0x2, 0x14fd}, 0xc, 0xd, [{0x10000, 0x1, 0x3ff, 0x7ff, 0xe00000, 0x6}, {0xfffff5ad, 0x9, 0xcf1b, 0x5, 0x35a, 0x200}, {0x3, 0x7, 0x7fffffff, 0x8}, {0x7ae, 0xa24, 0x9, 0xffffffff, 0x4001, 0x8}, {0x6, 0x80000001, 0x6f53, 0x7, 0x2, 0xf421}, {0x8, 0xffffffff, 0x987, 0xfc24, 0x49f, 0xfffffff8}, {0x6, 0x1ff, 0x2, 0x4d1a, 0x5, 0x8}, {0x3, 0x100, 0x101, 0x7, 0xfffffffd, 0xfffffffd}, {0x5, 0x1ff, 0xfffffffb, 0x6, 0x7, 0x3}]}, [{0x2, 0xc325, 0x4, 0x7, 0x4, 0x7}, {0x6, 0xb, 0x0, 0xfffffff8, 0x4, 0x2}, {0x2, 0x20000000, 0x7, 0x8, 0x6, 0xc4f0}, {0x2, 0xd, 0x2, 0x6, 0x1, 0x2}, {0x9, 0x1, 0x5, 0x6, 0xfffffff5, 0x40}, {0x8, 0x100, 0x2, 0x10001, 0x0, 0x333}, {0x1, 0xb, 0x6, 0x0, 0xffff, 0x800}, {0x7, 0x0, 0xfffffff0, 0xa, 0xfffffff4}, {0x9, 0xfffffb42, 0x7, 0x4, 0x10, 0x9}, {0x8, 0x1, 0x6, 0x8001, 0x584, 0x4}, {0x4, 0x1, 0x4, 0x2, 0x8, 0x4}, {0x7, 0x5, 0xc, 0x8, 0xed9, 0x40}, {0x7fff, 0xa, 0x400, 0x9, 0x2, 0x4}, {0xfffffffa, 0x40, 0x4, 0x4, 0xb2ed, 0x2}, {0x4, 0x9, 0x6, 0x6, 0x95, 0x9}, {0x8, 0x10000, 0x1, 0x40, 0x8, 0x4}, {0x7, 0x9, 0xfffffff7, 0x5, 0x4, 0x9}, {0x4, 0x80, 0x101, 0x62, 0x28f, 0x4}, {0x1, 0x5, 0x1, 0x0, 0x7, 0x3}, {0x4b2, 0x7, 0x8001, 0x9, 0x9, 0x7}, {0xc2, 0x5, 0x100, 0x7f, 0x4, 0x3e}, {0xb7, 0x3, 0x81, 0x1, 0x8, 0x3}, {0x2, 0x8c4, 0x10000, 0x2, 0x7, 0x4}, {0xe, 0x5, 0x5, 0x4, 0xc, 0x1}, {0x1, 0xd699, 0x100, 0x9, 0x40, 0x5}, {0xa, 0x5, 0x0, 0x8001, 0x2, 0x3}, {0x7, 0x2, 0x933, 0x9, 0x8, 0xf}, {0x5, 0x3, 0x100, 0x2, 0xb99, 0x85}, {0x8, 0x6, 0x4, 0x1, 0x9, 0x6}, {0x3, 0x5, 0xa0000, 0x1, 0xf}, {0x5, 0x4, 0x5, 0xec, 0x0, 0x58}, {0x7fffffff, 0x7, 0x8, 0x10000, 0x7, 0x6c}, {0x400, 0x80, 0x7f, 0x4, 0xad, 0x2}, {0x6, 0x1ff, 0x1, 0x5, 0x8, 0x6}, {0xf70, 0x3, 0x9, 0x3, 0x8, 0x4f}, {0x0, 0xc, 0x1, 0x40, 0xffffffff, 0xfffff3cb}, {0xe7d, 0x8001, 0x8, 0x8, 0x4, 0xfffffffe}, {0x4, 0x2, 0x7f80000, 0x1, 0xe8, 0x7010}, {0x0, 0x3148dc71, 0x4, 0x101, 0x22d07ceb, 0x5d}, {0x3f7b, 0x9, 0x40, 0xd68aa862, 0xd, 0x1}, {0x2, 0x78d, 0x4, 0xbcb0, 0x1, 0x8}, {0x167, 0x101, 0xfffffff9, 0x2dc2836, 0x2, 0x3}, {0x200, 0x80, 0x1, 0x3, 0x1, 0x5}, {0x5, 0x1, 0x4, 0x3db, 0x4, 0x1}, {0x8, 0x2, 0x3, 0x5, 0x4, 0x9d}, {0x2, 0x4, 0xf, 0x2, 0x8, 0x8}, {0x8, 0x7, 0x8, 0x5, 0xf85, 0x9}, {0x7c25, 0x100, 0x7, 0x8, 0x2, 0x2}, {0x8, 0x3, 0xa16a, 0x6, 0xc, 0x9}, {0x62b, 0x1, 0xffff, 0x3, 0x9, 0x2}, {0xfffffffa, 0x3153, 0x9, 0x5, 0x4, 0x7b4}, {0x65, 0x2, 0x4, 0x5, 0xfffff000, 0x4}, {0x3d, 0x5, 0x8, 0xff, 0x10000, 0x5}, {0x0, 0x6, 0x80000000, 0x3, 0x0, 0x7}, {0x8, 0xa2c3, 0x0, 0x0, 0x1, 0x3}, {0x0, 0x5, 0xffffff80, 0x401, 0x7adaf526, 0x3}, {0x647f, 0xf, 0x800, 0x1, 0x10, 0x1}, {0x8, 0xd2d, 0x3, 0x7, 0x5, 0x8000}, {0x7, 0xff, 0xe, 0x9, 0x800, 0xf}, {0x5, 0x1, 0x6, 0x92e, 0x0, 0x40}, {0xdf2, 0x0, 0xffffffff, 0x1, 0x800, 0x5}, {0x10001, 0x3, 0x0, 0xa6, 0x400, 0x5}, {0x4, 0x9f, 0x1, 0xbe, 0x0, 0x1}, {0x8, 0x5, 0x5, 0x9, 0x850, 0x1}, {0xb7, 0x7, 0xfec, 0x200, 0x40, 0x8}, {0x2, 0x8, 0x1, 0x4, 0x5, 0xafb}, {0xfc71, 0xe3, 0x4, 0x3, 0x80, 0x8000}, {0x9, 0x4, 0xfffffff5, 0x7ff, 0x38, 0x101}, {0x3, 0xc, 0x2d26, 0x101, 0x7f, 0x1}, {0x5, 0x1, 0x9, 0x7fffffff, 0x3ff, 0x7}, {0x64, 0x5a, 0x6, 0x0, 0x8, 0x8}, {0x4, 0x6, 0xc3b, 0x10, 0x2, 0xcfc}, {0x10, 0xb6c, 0xe, 0x80000001, 0x1, 0x649cbaaa}, {0xffffffff, 0x2, 0x8, 0x7, 0x1}, {0x9, 0x4, 0x4624, 0x4, 0xffffff01}, {0x0, 0x54b, 0x7, 0x5, 0x200, 0x1}, {0xc000000, 0x8, 0x2, 0x400, 0x3, 0x3}, {0x9, 0x81, 0x4, 0x0, 0x777, 0xb}, {0x8, 0x8, 0x8, 0x6, 0x1, 0x1}, {0x5, 0xb39a, 0x1, 0x6, 0x0, 0x80000001}, {0x6, 0xf, 0xffffff30, 0xe0, 0x5, 0x9}, {0x4, 0x76b4, 0xc03, 0x661, 0x1, 0x16eaa00}, {0x1000, 0x100, 0xff, 0xffff, 0x0, 0x47}, {0x2c, 0x10001, 0x4a33, 0x6, 0x84, 0xffffffff}, {0x0, 0x0, 0x5, 0x5, 0x2, 0x8}, {0x3, 0x3, 0x839e, 0x3, 0x5, 0x6}, {0x8, 0x3ff, 0xfff, 0x3ae453b6, 0xe1e, 0x7}, {0x49f2, 0x1, 0x4, 0x5, 0x200, 0x8}, {0x821, 0x9, 0x800, 0x101, 0xffffffff, 0x5}, {0x4, 0x4, 0x80000000, 0x8, 0x7, 0x2}, {0x800, 0x1, 0x7fff, 0xe80d, 0x2, 0x9}, {0x4, 0x7, 0xfffffff7, 0xd1, 0xb58, 0x101}, {0x0, 0x9, 0x0, 0x8, 0x9, 0x400}, {0x0, 0x5, 0x8, 0x7f, 0x8, 0x5}, {0x81, 0xffffffff, 0x5, 0xef6, 0x7, 0x7}, {0x343b4d30, 0x40, 0xfffffffa, 0xfffffff7, 0x100, 0x10000000}, {0x6, 0x78392d2b, 0x8, 0xfffffff7, 0x0, 0xfffffff6}, {0x2, 0x1, 0x0, 0x2, 0x0, 0xe}, {0x0, 0x8, 0x6, 0x9, 0x3, 0x7fff}, {0x3ff, 0x401, 0x9e, 0x8, 0x9, 0x2}, {0xd9, 0x259, 0x3, 0x9, 0x8, 0x3ff}, {0x79b, 0xf6, 0xa91, 0x5, 0x9, 0x6}, {0x99, 0x100, 0x0, 0x8001, 0xfffffff4, 0x2}, {0x0, 0x10, 0x2, 0x2, 0x9, 0xa55a}, {0x7, 0x0, 0x2, 0x9, 0x6, 0x6}, {0x80, 0x7, 0x3d1, 0x8, 0x7, 0x3}, {0x1f1, 0xb9cc, 0xc7d, 0xfffff801, 0x0, 0x6}, {0x7, 0x1, 0x2, 0x3, 0x0, 0x3}, {0x8, 0xfffffff7, 0x2, 0x7, 0x9, 0x9}, {0x40, 0x1000, 0x401, 0x400, 0x5, 0xb29}, {0x160, 0x6, 0x4, 0xf02, 0x46e2, 0x9}, {0x7fff, 0x6, 0x5, 0x3, 0x1, 0x8}, {0x3, 0x602, 0x7ff, 0x3, 0x7, 0x4}, {0x7cd7, 0x80000000, 0x7, 0xe000, 0x9, 0x2}, {0x5, 0x1000, 0x3, 0x3, 0x2, 0x8000}, {0xfffffff8, 0x1, 0x2, 0x0, 0x9, 0x8cc3}, {0xff, 0x0, 0x800, 0x800, 0xa, 0x80000001}, {0x1, 0xffffffff, 0x9, 0xfffffff8, 0x8, 0x3}, {0x7, 0x4, 0x9, 0x8, 0x7, 0x3}, {0x8, 0x5, 0x18c59228, 0x5, 0xbf8}, {0x6, 0x9, 0x8, 0x0, 0x2, 0x5}, {0x6, 0x0, 0x2, 0x8, 0xffffff26, 0x3}, {0x7, 0x2, 0x7, 0x3ff, 0x9}, {0x0, 0x984a, 0x80000001, 0x6, 0x9, 0x21cb}, {0x6, 0x6, 0x0, 0x6, 0x2, 0x8}, {0x37a7, 0x7, 0x528000, 0x80, 0x4, 0x6}, {0x7, 0x7fff, 0x101, 0x9, 0x9, 0x2}, {0x82, 0xb, 0x401, 0x80000001, 0x1, 0x9}], [{}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2d1bee2daae734d5}, {0x5}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {}, {0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x4}, {0x7}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3}, {0x0, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x2}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x6e089658420e1813}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0xfa0a93268f8c460a}, {0x3}, {0x5}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}]}}]}, {0x9, 0x6, "bf0459c01b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x9c, 0x1f, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x80, 0x2, 0x1, 0x6, 0x10000}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xffffff5b}]}, {0x35, 0x6, "2f5ed0cdf871fa6fc97f5f97b857bffbb0ecf342ee8b6a299ccee13398f71dded261d0cbc2b0ab291cc6440c0fb41f129c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x128, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xe12f2b9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x53, 0x2, 0x9, 0x6}}]}, {0xc9, 0x6, "c83b16a091f623ac8be3f7d155d6721aaebc39db98777166aa6b913454200c72e9e2d558cfcc13db52b4557fb7d0f797f150ac80d6a7371a0d1681933667f2f04cd8f71db77bc0c600bf051ce9f2d8a11a8c6eb0316b5f0c5321a78c0095f784e309981687d65c06ea58c83b80af3b708dfd66d20ed8a8d89671bee92d53d547c7c2010f9719c6a43521f3a4d944faff1b43e3411e5ffaa1790a926e4afdd57b64a9ca70013da382e1a7074efced034771218a0c681935a8f9eaebe588c0d5fbe86a0f8a2c"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x78, 0xe, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @random="e5c52f1bce94"}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5a}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @random="39e1030dcf18"}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}]}, {0xd, 0x6, "af85e36f2b3829251d"}, {0xc}, {0xc, 0x8, {0x4, 0x3}}}}, @m_ife={0x1068, 0x16, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xffffffd0, 0x8000, 0x4, 0x80, 0x10000}}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @TCA_IFE_TYPE={0x6, 0x5, 0xd}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0xff}}, @TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0x2f}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x5}}]}, 0x2518}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r1) keyctl$search(0xa, r1, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_vlan\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x4, 0x8201, 0x0, 0x0, 0x2, 0x2fd, 0x100000}}) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x46, 0x0, &(0x7f0000000140)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB="0000000000000000bedcc34ac217bf8fb7030033e32842914ecae800839e4300bf09000000000000550901000000000095000000d92bb3462b27b4ce745f488cb4f8d800000000bf91000000000000b702000000adda000000000000000000b795"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in, 0x0, 0x32}, @in6=@loopback, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2f}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff}}]}, 0x154}}, 0x0) 2.76915933s ago: executing program 4 (id=656): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x408400, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000e40)={0x0, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000001340)={0x0, 0x7b5, 0xfffffff8, {0xfffffffc, 0xfffffffd}, 0xfffffff7, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x43}, 0x3}}, 0x10, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000004000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESOCT=r4], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004) getdents64(r1, &(0x7f0000000600)=""/38, 0x26) getdents64(r1, 0xfffffffffffffffe, 0x29) r12 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r12}}, 0x58) 2.477388244s ago: executing program 1 (id=657): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x408400, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000e40)={0x0, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000001340)={0x0, 0x7b5, 0xfffffff8, {0xfffffffc, 0xfffffffd}, 0xfffffff7, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x43}, 0x3}}, 0x10, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000004000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESOCT=r4], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004) getdents64(r1, &(0x7f0000000600)=""/38, 0x26) getdents64(r1, 0xfffffffffffffffe, 0x29) r12 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r12}}, 0x58) 2.341487256s ago: executing program 4 (id=659): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) fcntl$lock(r3, 0x26, &(0x7f0000000200)={0x1, 0x0, 0x2000000007}) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r4, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='+}[@\x00') ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="800600b404de00bb52e408b85825cc7909fb8e325acc34e4a1f2a03ed98fd4aaadac210b9f"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.191222908s ago: executing program 1 (id=662): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r4, 0x0, 0x0, 0x0, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000380), &(0x7f0000000300)=r5}, 0x20) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x6) 2.023265381s ago: executing program 2 (id=664): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006440000001e0a0501000000"], 0xc8}}, 0x0) ptrace(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000010000000a0000000800000000000000c817ce680dfbca2d8b0c5c3b7a2e4df6d6002383b1e42129db1baff8b07576047d8ee45e750485acc8c46b298cb533137272b353fbea77d79bc2cac7bd00fe608c00b6c3e9e0fbc432613c66d347e3f1e64c221943b9e6f8caddf24aa42c219fa8175986c7402ca11190a251d9319a2882121c27a835d7a443e231cda5760b29f8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100df0086dd607428dd00183a00fe80000000bbfc00000000000000000000000000000189009078fd000000fe8000000000000000000000000000bb"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r5, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x20000090) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r7], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000000)=0x9, 0x4) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff0000", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0) 1.848268203s ago: executing program 2 (id=666): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000d00)='xen_cpu_write_idt_entry\x00', r3, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x26, &(0x7f0000000200)={0x1, 0x0, 0x2000000007}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r5, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='+}[@\x00') r6 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="800600b404de00bb52e408b85825cc7909fb8e325acc34e4a1f2a03ed98fd4aaadac210b9f"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r8, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.727899745s ago: executing program 0 (id=668): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pread64(r0, &(0x7f000001a240)=""/102386, 0x18ff2, 0x5) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000380)='mm_khugepaged_scan_pmd\x00', r3}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000000)={0x5, 0x0, 0x7fff, 0x0, 0x4, 0xfffc}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000007300)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x8, 0x9, 0x4, {0x3, 0x0, 0x53d, 0x5, 0x1ea, 0xe0000000}, {0x4, 0x1, 0x5, 0x7f, 0xc, 0x800}, 0x6, 0x40000, 0x5}}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) creat(&(0x7f0000000600)='./file0\x00', 0xe5) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r10 = creat(&(0x7f00000003c0)='./file0\x00', 0x3) dup2(r10, r10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x200002, 0x0) 1.651207066s ago: executing program 0 (id=669): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe342"], 0x10b8}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x2, 0x0, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000000c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0xc, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfffffffd, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) 1.36906504s ago: executing program 0 (id=671): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x408400, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000e40)={0x0, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000001340)={0x0, 0x7b5, 0xfffffff8, {0xfffffffc, 0xfffffffd}, 0xfffffff7, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x43}, 0x3}}, 0x10, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000004000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESOCT=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) 1.158436033s ago: executing program 0 (id=672): r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="8a316cd92a85aedc2fa23fe28c9ee9"], 0x1, 0x64e, &(0x7f0000000dc0)="$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") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) nanosleep(&(0x7f0000000240)={0x0, 0x989680}, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000180)=0x5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="000000000000b4484ae7ccf0d8f4000000", @ANYRES16=r3, @ANYBLOB="020027bd7000fddbdf250500000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000300000006000000"], 0x28}}, 0xc000) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0003283d7002fedbdf25200000005d876c5e", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200080d0}, 0x80) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) sendto$inet6(r1, &(0x7f0000000340)="b8e6b3d65c3fb943b685e048a90111c404e6bc79cedbce46bb2445946ef42ca21e82ec25d4382c47b77eeb39f5", 0x2d, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffdf}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000f80)=ANY=[@ANYBLOB="ce81e4e60ed5c5817247f6dc57fad367d699ec844f3d107cb4bf092a055d5c32e6fd259e4b91d9e8407f93137aa169ca69f2e4226cd51eaa8c2b6cb3a0161f90d75caa388333f0abc10f927703f796145a2ffa541a97dd9c127c9867cb6bb06d6952f27c361da100eb5907aa590da42d696d601cec4a37b062e45f595ac16ace58efcdabb7137a546cca0b2c43958a73d9e8189598a580e4b846646894fd1b137d36178d78e95bfbf2", @ANYBLOB="9c090100c29cef7d4174658a339dcf75d2a88e1ee65995c9ae79a8f7d1c8debcdac32cbf7ce2b30d071a7547ff14d325f2aee4e193c3760adeb109e04125c6bc8071e80b40ddd15532282de306d766a85afa9c14c52f10c19fdb2eaf17fe44ed4faa2ae72773e0cbcb9e572a7bce356bf534a706f3fe4ad9548adbe73342252a2ff48ca45c"], 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x60000}, 0x20) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x2) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000001000/0x3000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r5, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xe, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x20008053) r6 = io_uring_setup(0x4fd, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xb6}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 853.309978ms ago: executing program 3 (id=673): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x408400, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000e40)={0x0, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000001340)={0x0, 0x7b5, 0xfffffff8, {0xfffffffc, 0xfffffffd}, 0xfffffff7, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x43}, 0x3}}, 0x10, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000004000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESOCT=r4], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004) getdents64(r1, &(0x7f0000000600)=""/38, 0x26) getdents64(r1, 0xfffffffffffffffe, 0x29) r12 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r12}}, 0x58) 750.771969ms ago: executing program 2 (id=674): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000a389aec500000003000000000000000000000000000000000000b098b5e9abf494b710c95841227e9c6fe021f5849a69001005c41348686feb429b1aa7f9bc36bf9cc6720851d8ffc0f8eb63a1f8bce417df213877559a21fd1277efa4650000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000f60018120000", @ANYRES16=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f00000015c0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x400000000000045c], 0x0, 0xffffffffff600000, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='block_rq_requeue\x00', r4, 0x0, 0x5}, 0x18) r6 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r7, 0xa, 0x12) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x12, &(0x7f0000004900), 0x4) syz_clone3(&(0x7f0000000ac0)={0x4340600, &(0x7f0000000840)=0xffffffffffffffff, &(0x7f0000000880), &(0x7f00000008c0), {0x2a}, &(0x7f0000000900)=""/35, 0x23, &(0x7f0000000a00)=""/169, &(0x7f0000000940)=[r6, r6], 0x2}, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000b40)) getresuid(&(0x7f0000000980), &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)) r13 = gettid() lstat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getgid() sendmsg$unix(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="34000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r7, @ANYRES32, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r10, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=r6, @ANYRES32=r11, @ANYRES32=r6, @ANYRES32=r12, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15], 0xc0}, 0x10) r16 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x5, &(0x7f00000007c0)=[{0x80, 0xd, 0x7, 0x8}, {0x1, 0x7, 0xc, 0x1ff}, {0xe, 0x6, 0xce, 0x1}, {0x1000, 0xa, 0x3, 0x5}, {0x1, 0x8, 0xff, 0x208007}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r16, 0xc0502100, &(0x7f0000000340)) 501.253093ms ago: executing program 2 (id=675): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x20000090) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r7], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000000)=0x9, 0x4) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff0000", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0) 392.445514ms ago: executing program 4 (id=677): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000a389aec500000003000000000000000000000000000000000000b098b5e9abf494b710c95841227e9c6fe021f5849a69001005c41348686feb429b1aa7f9bc36bf9cc6720851d8ffc0f8eb63a1f8bce417df213877559a21fd1277efa4650000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000f60018120000", @ANYRES16=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f00000015c0)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x400000000000045c], 0x0, 0xffffffffff600000, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='block_rq_requeue\x00', r4, 0x0, 0x5}, 0x18) r6 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r7, 0xa, 0x12) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x12, &(0x7f0000004900), 0x4) syz_clone3(&(0x7f0000000ac0)={0x4340600, &(0x7f0000000840)=0xffffffffffffffff, &(0x7f0000000880), &(0x7f00000008c0), {0x2a}, &(0x7f0000000900)=""/35, 0x23, &(0x7f0000000a00)=""/169, &(0x7f0000000940)=[r6, r6], 0x2}, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000140)='./file0\x00', r11, 0xee00) fstat(0xffffffffffffffff, &(0x7f0000000b40)) getresuid(&(0x7f0000000980), &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)) r13 = gettid() lstat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getgid() sendmsg$unix(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="34000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r7, @ANYRES32, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r10, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=r6, @ANYRES32=r11, @ANYRES32=r6, @ANYRES32=r12, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15], 0xc0}, 0x10) r16 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x5, &(0x7f00000007c0)=[{0x80, 0xd, 0x7, 0x8}, {0x1, 0x7, 0xc, 0x1ff}, {0xe, 0x6, 0xce, 0x1}, {0x1000, 0xa, 0x3, 0x5}, {0x1, 0x8, 0xff, 0x208007}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r16, 0xc0502100, &(0x7f0000000340)) 333.146105ms ago: executing program 2 (id=678): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x408400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000e40)={0x0, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000001340)={0x0, 0x7b5, 0xfffffff8, {0xfffffffc, 0xfffffffd}, 0xfffffff7, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x43}, 0x3}}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004) getdents64(r0, &(0x7f0000000600)=""/38, 0x26) getdents64(r0, 0xfffffffffffffffe, 0x29) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) 191.145967ms ago: executing program 1 (id=679): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') pread64(r0, &(0x7f000001a240)=""/102386, 0x18ff2, 0x5) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000380)='mm_khugepaged_scan_pmd\x00', r3}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000000)={0x5, 0x0, 0x7fff, 0x0, 0x4, 0xfffc}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000007300)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x8, 0x9, 0x4, {0x3, 0x0, 0x53d, 0x5, 0x1ea, 0xe0000000}, {0x4, 0x1, 0x5, 0x7f, 0xc, 0x800}, 0x6, 0x40000, 0x5}}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) creat(&(0x7f0000000600)='./file0\x00', 0xe5) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r10 = creat(&(0x7f00000003c0)='./file0\x00', 0x3) dup2(r10, r10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x200002, 0x0) 190.137547ms ago: executing program 3 (id=680): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) fcntl$lock(r3, 0x26, &(0x7f0000000200)={0x1, 0x0, 0x2000000007}) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r4, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='+}[@\x00') ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="800600b404de00bb52e408b85825cc7909fb8e325acc34e4a1f2a03ed98fd4aaadac210b9f"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 133.055458ms ago: executing program 2 (id=681): syz_io_uring_setup(0x2cdb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f00000004c0)=ANY=[@ANYBLOB='trqyans=unix']) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0xd15, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x150, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x0, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}, @tfcpad={0x8, 0x16, 0x4}, @mark={0xc, 0x15, {0x35075c, 0x6}}]}, 0x150}}, 0x804) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="301aadf06f8c99013d1c0000", @ANYRES16=0x0, @ANYBLOB="08002cbd7000ffdbdf25040000000500210001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) socket(0x10, 0x3, 0x0) 108.804048ms ago: executing program 1 (id=682): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000d00)='xen_cpu_write_idt_entry\x00', r3, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x26, &(0x7f0000000200)={0x1, 0x0, 0x2000000007}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r5, 0x400, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='+}[@\x00') r6 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="800600b404de00bb52e408b85825cc7909fb8e325acc34e4a1f2a03ed98fd4aaadac210b9f"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r8, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 12.70731ms ago: executing program 0 (id=683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x7fff, 0x42, {{0x24, 0x4, 0x3, 0x5, 0x90, 0x66, 0x0, 0xfb, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x44, 0x69, 0x1, 0xd, [{@multicast1, 0x9}, {@empty}, {@broadcast, 0xc2}, {@remote, 0xafa8}, {@loopback, 0x80000000}, {@remote, 0x2}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x17, 0x3, 0x1, [{@loopback}, {@empty, 0x6}, {@broadcast, 0xb}, {@rand_addr=0x64010100, 0x8}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xe8, [@multicast1, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3, 0x0, 0x1}, 0x18) syz_io_uring_setup(0xa16, &(0x7f0000000740)={0x0, 0x80000000, 0x2, 0x2, 0x23d}, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) shutdown(r5, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x25, 0x1, 0x0) r8 = signalfd(r7, &(0x7f00000004c0)={[0x3b4d28a]}, 0x8) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f0000000500), &(0x7f0000000640)=0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r10, 0xb, &(0x7f0000000480), 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r11, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e23, 0x1, @remote, 0xec}}}, 0x90) 11.33556ms ago: executing program 0 (id=684): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000d00)='xen_cpu_write_idt_entry\x00', r3, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x26, &(0x7f0000000200)={0x1, 0x0, 0x2000000007}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r5, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='+}[@\x00') r6 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="800600b404de00bb52e408b85825cc7909fb8e325acc34e4a1f2a03ed98fd4aaadac210b9f"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r8, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 0s ago: executing program 4 (id=685): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$eJzs3b9rO2UYAPDn0jQJOiSCkwge6OD05dvv6pIiLRQzKRnUQYttQZogtFDwB8ZOri6Ori6C4OY/4eJ/ILgKbhYsnNzlrklqGpPatP74fJa+fe953nve69uWDvf03eeHxwdpHJ1/8lO0WknUutGNiyQ6UYvKZzGj+0UAAP9mF1kWv2Zjq+QlEdFaX1kAwBqt/Pv/u7WXBACs2RtvvvXadq+383qatmJ3+PlZP//LPv84vr59FO/HIA7jcbTjMiK7Mh7vZlk2qqe5Trw0HJ3188zhOz+U62//ElHkb0U7OsXUbP5eb2crHZvKH+V1PFXev5vnP4l2PDvn/nu9nSdz8qPfiJdfnKr/UbTjx/figxjEQVHEOD9qEZ9upemr2Ze/ffx2Xl6en4zO+s0ibiLbuOcvDQAAAAAAAAAAAAAAAAAAAAAA/2GPyt45zSj69+RTZf+djcv8k81IK53Z/jzj/KRa6Fp/oFEWX1X9eR6naZqVgZP8ejxXj/rD7BoAAAAAAAAAAAAAAAAAAAD+WU4//Oh4fzA4PLmTQdUNoHqt/7brdKdmXojFwc3JvWrlcMHKsVHFJBELy8g3sXTNv5dtD2736J65qeZvvl16na//eu/lYHOJmL85qE7X8X4y/xk2o5ppVYfk++mYRix5r8ZNl7KVjl9j7qX2yntvPF0MRgtiIllU2Cs/j59cOZNc30WjeKpz0zfLwVT6bExr+fOcf6f8SXLVrSO52x9CAAAAAAAAAAAAAAAAAABAYfLS75yL5wtTa1lzbWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2a/P//FQajMnmJ4EacnD7wFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+CMAAP//SfdjDw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="bb189a1764f8187eeeb504309ffc494b63131f95356a5c0707dff5da6beba01343b1551d"], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='fsi_dev_init\x00', r3, 0x0, 0x1}, 0x18) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) connect$qrtr(0xffffffffffffffff, &(0x7f00000002c0)={0x2a, 0x6, 0xfffffffe}, 0xc) syz_io_uring_setup(0x36ec, &(0x7f0000000700)={0x0, 0x3a32, 0x4000, 0x3, 0x28c}, &(0x7f0000000340), &(0x7f0000000280)) socket$inet_tcp(0x2, 0x1, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmget$private(0x0, 0x11000, 0x0, &(0x7f0000fec000/0x11000)=nil) pwrite64(r0, &(0x7f00000003c0)='\x00\x00', 0xfffffe97, 0x1) r7 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r7, 0x0, 0x69) kernel console output (not intermixed with test programs): 000000-0000-0000-0000-000000000000. [ 43.337898][ T3756] netlink: 'syz.3.75': attribute type 1 has an invalid length. [ 43.448207][ T3764] loop1: detected capacity change from 0 to 2048 [ 43.494041][ T3764] atomic_op ffff88811b719128 conn xmit_atomic 0000000000000000 [ 43.611771][ T3775] siw: device registration error -23 [ 43.633978][ T3770] netlink: 'syz.0.88': attribute type 1 has an invalid length. [ 44.055437][ T3785] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 44.191711][ T3783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.80'. [ 44.279719][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 44.279738][ T29] audit: type=1400 audit(1749247065.360:720): avc: denied { firmware_load } for pid=3771 comm="syz.1.79" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 44.392097][ T3787] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 44.406883][ T3787] netlink: 76 bytes leftover after parsing attributes in process `syz.0.81'. [ 44.431519][ T3787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.81'. [ 44.449250][ T29] audit: type=1326 audit(1749247065.528:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 44.501344][ T29] audit: type=1326 audit(1749247065.547:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 44.525567][ T29] audit: type=1326 audit(1749247065.547:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 44.549443][ T29] audit: type=1326 audit(1749247065.547:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 44.573715][ T29] audit: type=1326 audit(1749247065.547:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 44.598223][ T29] audit: type=1326 audit(1749247065.547:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 44.622826][ T29] audit: type=1326 audit(1749247065.547:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 44.647090][ T29] audit: type=1326 audit(1749247065.547:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 44.671576][ T29] audit: type=1326 audit(1749247065.547:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 44.718318][ T3798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.85'. [ 44.745499][ T3766] loop4: detected capacity change from 0 to 512 [ 44.813776][ T3766] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 44.822786][ T3766] System zones: 1-12 [ 44.827366][ T3766] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 3: comm syz.4.76: lblock 0 mapped to illegal pblock 3 (length 1) [ 44.845233][ T3766] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.76: error -117 reading directory block [ 44.858294][ T3766] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 44.922937][ T3808] 9pnet_fd: Insufficient options for proto=fd [ 44.931024][ T3766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.952790][ T3806] xt_CT: You must specify a L4 protocol and not use inversions on it [ 44.982475][ T3806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 45.018419][ T3808] loop1: detected capacity change from 0 to 512 [ 45.029237][ T3766] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #2: comm syz.4.76: corrupted xattr block 255: invalid header [ 45.047394][ T3808] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.071695][ T3808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.085159][ T3808] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.129537][ T3766] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 45.180953][ T3766] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.507435][ T3821] validate_nla: 1 callbacks suppressed [ 45.507453][ T3821] netlink: 'syz.4.91': attribute type 1 has an invalid length. [ 45.631249][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.642128][ T3824] netlink: 'syz.3.92': attribute type 1 has an invalid length. [ 45.651196][ T3824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.92'. [ 45.736765][ T3827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.94'. [ 45.755756][ T3830] netlink: 596 bytes leftover after parsing attributes in process `syz.1.93'. [ 45.885413][ T3836] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 45.894600][ T3835] netlink: 'syz.4.96': attribute type 1 has an invalid length. [ 45.903878][ T3835] netlink: 76 bytes leftover after parsing attributes in process `syz.4.96'. [ 45.917541][ T3835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.96'. [ 45.998759][ T3842] loop0: detected capacity change from 0 to 512 [ 46.112107][ T3849] netlink: 'syz.2.97': attribute type 1 has an invalid length. [ 46.220527][ T3852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.97'. [ 46.407273][ T3842] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.431640][ T3842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.444991][ T3842] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.503490][ T3862] loop4: detected capacity change from 0 to 512 [ 46.541129][ T3862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.555515][ T3862] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.593754][ T3869] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 46.604069][ T3869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.104'. [ 46.705495][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.717815][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.864767][ T3864] loop2: detected capacity change from 0 to 512 [ 46.872856][ T3864] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 46.882322][ T3864] System zones: 1-12 [ 46.892653][ T3864] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 3: comm syz.2.101: lblock 0 mapped to illegal pblock 3 (length 1) [ 46.907572][ T3864] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.101: error -117 reading directory block [ 46.923483][ T3864] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 46.932610][ T3864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.947386][ T3876] 9pnet_fd: Insufficient options for proto=fd [ 46.956600][ T3864] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #2: comm syz.2.101: corrupted xattr block 255: invalid header [ 46.971737][ T3864] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 46.979380][ T3864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.998264][ T3876] loop3: detected capacity change from 0 to 512 [ 47.006449][ T3876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.112062][ T3876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.124793][ T3876] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.435108][ T3885] loop1: detected capacity change from 0 to 512 [ 47.454133][ T3885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.487018][ T3885] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.574146][ T3890] xt_CT: You must specify a L4 protocol and not use inversions on it [ 47.585590][ T3890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 47.597969][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.615380][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.660796][ T3897] netlink: 'syz.0.111': attribute type 1 has an invalid length. [ 47.965384][ T3911] hub 9-0:1.0: USB hub found [ 47.984057][ T3911] hub 9-0:1.0: 8 ports detected [ 48.124118][ T3918] loop0: detected capacity change from 0 to 2048 [ 48.299885][ T3927] loop1: detected capacity change from 0 to 512 [ 48.351210][ T3927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.509992][ T3927] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.638967][ T3938] 9pnet_fd: Insufficient options for proto=fd [ 48.655096][ T3938] loop2: detected capacity change from 0 to 512 [ 49.051698][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.065200][ T3938] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.103697][ T3938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.135311][ T3938] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.196332][ T3945] netlink: 'syz.1.124': attribute type 1 has an invalid length. [ 49.267428][ T3937] loop4: detected capacity change from 0 to 1024 [ 49.278671][ T3945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.329126][ T3937] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.341696][ T3937] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.371157][ T3937] JBD2: no valid journal superblock found [ 49.378255][ T3937] EXT4-fs (loop4): Could not load journal inode [ 49.385494][ T3956] syz.1.128 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.401781][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.434334][ T3956] netlink: 'syz.1.128': attribute type 4 has an invalid length. [ 49.496311][ T3964] loop2: detected capacity change from 0 to 256 [ 49.523570][ T3937] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 49.598653][ T3964] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 49.669907][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 49.669988][ T29] audit: type=1400 audit(1749247070.402:1138): avc: denied { mount } for pid=3972 comm="syz.1.133" name="/" dev="ramfs" ino=6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 49.704675][ T3980] netlink: 'syz.0.135': attribute type 1 has an invalid length. [ 49.722317][ T3980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.732458][ T3984] loop3: detected capacity change from 0 to 512 [ 49.794298][ T3984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.828372][ T29] audit: type=1400 audit(1749247070.542:1139): avc: denied { add_name } for pid=3968 comm="dhcpcd-run-hook" name="resolv.conf.lapb2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.829628][ T3984] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.851190][ T29] audit: type=1400 audit(1749247070.542:1140): avc: denied { create } for pid=3968 comm="dhcpcd-run-hook" name="resolv.conf.lapb2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.885114][ T29] audit: type=1400 audit(1749247070.552:1141): avc: denied { write } for pid=3968 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb2.link" dev="tmpfs" ino=1729 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.911478][ T29] audit: type=1400 audit(1749247070.552:1142): avc: denied { append } for pid=3968 comm="dhcpcd-run-hook" name="resolv.conf.lapb2.link" dev="tmpfs" ino=1729 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.952519][ T3996] netlink: 'syz.0.138': attribute type 1 has an invalid length. [ 49.961629][ T29] audit: type=1400 audit(1749247070.673:1143): avc: denied { remove_name } for pid=4000 comm="rm" name="resolv.conf.lapb2.link" dev="tmpfs" ino=1729 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.985705][ T29] audit: type=1400 audit(1749247070.673:1144): avc: denied { unlink } for pid=4000 comm="rm" name="resolv.conf.lapb2.link" dev="tmpfs" ino=1729 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.027681][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.077240][ T29] audit: type=1326 audit(1749247070.786:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 50.119253][ T4007] loop2: detected capacity change from 0 to 512 [ 50.203390][ T29] audit: type=1326 audit(1749247070.814:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 50.233558][ T29] audit: type=1326 audit(1749247070.814:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 50.283186][ T4007] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 50.327064][ T4007] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #13: comm syz.2.139: iget: bad i_size value: 12154757448730 [ 50.367903][ T4007] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.139: couldn't read orphan inode 13 (err -117) [ 50.457252][ T4007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.583439][ T4027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.597196][ T4034] __nla_validate_parse: 10 callbacks suppressed [ 50.597306][ T4034] netlink: 112 bytes leftover after parsing attributes in process `syz.0.142'. [ 50.619426][ T4005] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 50.861238][ T4037] loop1: detected capacity change from 0 to 256 [ 50.869449][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.940709][ T4037] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 51.144125][ T4034] loop0: detected capacity change from 0 to 512 [ 51.169004][ T4034] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.209174][ T4034] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #4: comm syz.0.142: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 2308(4), depth 0(0) [ 51.238932][ T4034] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.142: Bad quota inode: 4, type: 1 [ 51.254513][ T4034] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.272666][ T4034] EXT4-fs (loop0): mount failed [ 51.437410][ T4082] loop3: detected capacity change from 0 to 256 [ 51.472650][ T4084] netlink: 'syz.1.148': attribute type 1 has an invalid length. [ 51.500424][ T4082] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 51.512075][ T4088] netlink: 'syz.2.150': attribute type 39 has an invalid length. [ 51.532344][ T4092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.148'. [ 51.562422][ T4092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 51.573245][ T4096] netlink: 'syz.4.151': attribute type 1 has an invalid length. [ 51.672350][ T4105] loop1: detected capacity change from 0 to 512 [ 51.681972][ T4076] loop0: detected capacity change from 0 to 1024 [ 51.702305][ T4076] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.715041][ T4076] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 51.760536][ T4110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.151'. [ 51.772630][ T4105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.785600][ T4106] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 51.797301][ T4106] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 51.801805][ T4105] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.807066][ T4106] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 51.821665][ T4076] JBD2: no valid journal superblock found [ 51.826812][ T4106] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 51.845866][ T4076] EXT4-fs (loop0): Could not load journal inode [ 52.073954][ T4106] bond1: (slave geneve2): making interface the new active one [ 52.172765][ T4106] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 52.302594][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.327968][ T4076] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 52.407223][ T4127] loop1: detected capacity change from 0 to 512 [ 52.445938][ T4127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.469140][ T4127] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.508455][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.727611][ T4144] loop3: detected capacity change from 0 to 512 [ 53.446346][ T4152] loop1: detected capacity change from 0 to 256 [ 53.626664][ T4144] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 53.704781][ T4144] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #13: comm syz.3.156: iget: bad i_size value: 12154757448730 [ 53.738948][ T4144] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.156: couldn't read orphan inode 13 (err -117) [ 53.754630][ T4144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.772671][ T4163] loop0: detected capacity change from 0 to 256 [ 53.816763][ T4152] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 53.834368][ T4150] 9pnet_fd: p9_fd_create_unix (4150): problem connecting socket: ./file1: -2 [ 53.848220][ T4135] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 53.947361][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.075913][ T4169] loop4: detected capacity change from 0 to 2048 [ 54.132682][ T4175] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 54.182766][ T4177] netlink: 'syz.1.167': attribute type 1 has an invalid length. [ 54.192860][ T3513] loop4: p3 < > p4 < > [ 54.197103][ T3513] loop4: partition table partially beyond EOD, truncated [ 54.205519][ T3513] loop4: p3 start 4284289 is beyond EOD, truncated [ 54.218129][ T4175] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 54.227367][ T4175] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 54.236995][ T4175] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 54.246032][ T4175] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 54.258048][ T4175] bond1: (slave geneve2): making interface the new active one [ 54.266378][ T4175] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 54.278876][ T4175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.166'. [ 54.294697][ T4182] netlink: 76 bytes leftover after parsing attributes in process `syz.1.167'. [ 54.325024][ T4177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.167'. [ 54.334739][ T4177] 8021q: adding VLAN 0 to HW filter on device bond3 [ 54.913535][ T4180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 55.118442][ T4169] loop4: p3 < > p4 < > [ 55.122975][ T4169] loop4: partition table partially beyond EOD, truncated [ 55.344616][ T4169] loop4: p3 start 4284289 is beyond EOD, truncated [ 55.375892][ T10] IPVS: starting estimator thread 0... [ 55.388244][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 55.388261][ T29] audit: type=1326 audit(1749247075.753:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0cfd79e929 code=0x7ffc0000 [ 55.419547][ T29] audit: type=1326 audit(1749247075.753:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd79e929 code=0x7ffc0000 [ 55.494272][ T29] audit: type=1326 audit(1749247075.856:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f0cfd79e929 code=0x7ffc0000 [ 55.518298][ T29] audit: type=1326 audit(1749247075.856:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd79e929 code=0x7ffc0000 [ 55.542767][ T29] audit: type=1326 audit(1749247075.856:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd79e929 code=0x7ffc0000 [ 55.617762][ T4190] IPVS: using max 2544 ests per chain, 127200 per kthread [ 55.657363][ T4197] netlink: 'syz.0.170': attribute type 1 has an invalid length. [ 55.677038][ T29] audit: type=1400 audit(1749247075.884:1463): avc: denied { read } for pid=4168 comm="syz.4.165" path="socket:[5877]" dev="sockfs" ino=5877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.701508][ T29] audit: type=1326 audit(1749247075.978:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 55.701542][ T29] audit: type=1326 audit(1749247075.978:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 55.701643][ T29] audit: type=1326 audit(1749247075.978:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 55.701742][ T29] audit: type=1326 audit(1749247075.978:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4191 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 55.706591][ T4197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.170'. [ 55.814557][ T4197] 8021q: adding VLAN 0 to HW filter on device bond3 [ 55.855355][ T4208] loop0: detected capacity change from 0 to 256 [ 55.906744][ T4185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.165'. [ 56.069017][ T4224] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 56.107739][ T4224] netlink: 76 bytes leftover after parsing attributes in process `syz.2.179'. [ 56.119938][ T4224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.179'. [ 56.137372][ T4224] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.279795][ T4235] loop2: detected capacity change from 0 to 256 [ 56.310595][ T4235] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 56.371757][ T4237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 56.631418][ T4230] loop4: detected capacity change from 0 to 1024 [ 56.763221][ T4230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.775632][ T4230] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.790708][ T4230] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 8: comm syz.4.181: lblock 8 mapped to illegal pblock 8 (length 1) [ 56.806612][ T4230] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117 [ 56.818967][ T4230] EXT4-fs (loop4): This should not happen!! Data will be lost [ 56.818967][ T4230] [ 56.842879][ T4230] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 56.858270][ T4230] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28 [ 56.870896][ T4230] EXT4-fs (loop4): This should not happen!! Data will be lost [ 56.870896][ T4230] [ 56.880640][ T4230] EXT4-fs (loop4): Total free blocks count 0 [ 56.886748][ T4230] EXT4-fs (loop4): Free/Dirty block details [ 56.892734][ T4230] EXT4-fs (loop4): free_blocks=4293918720 [ 56.898567][ T4230] EXT4-fs (loop4): dirty_blocks=480 [ 56.903853][ T4230] EXT4-fs (loop4): Block reservation details [ 57.388986][ T59] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 7) [ 58.011704][ T4272] loop4: detected capacity change from 0 to 256 [ 58.350583][ T4289] loop1: detected capacity change from 0 to 512 [ 58.360049][ T4286] netlink: 40 bytes leftover after parsing attributes in process `syz.4.197'. [ 58.398601][ T4289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.417212][ T4289] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.671367][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.144439][ T4316] netlink: 'syz.2.205': attribute type 1 has an invalid length. [ 59.163632][ T4316] netlink: 76 bytes leftover after parsing attributes in process `syz.2.205'. [ 59.174190][ T4316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.205'. [ 59.185787][ T4316] 8021q: adding VLAN 0 to HW filter on device bond3 [ 60.238600][ T4335] loop4: detected capacity change from 0 to 512 [ 60.248604][ T4335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.297489][ T4335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.310904][ T4335] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.335830][ T4340] loop3: detected capacity change from 0 to 512 [ 60.360919][ T4340] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.410991][ T4340] EXT4-fs (loop3): orphan cleanup on readonly fs [ 60.425382][ T4340] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.218: bg 0: block 248: padding at end of block bitmap is not set [ 60.449365][ T4340] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.218: Failed to acquire dquot type 1 [ 60.471354][ T4340] EXT4-fs (loop3): 1 truncate cleaned up [ 60.490118][ T4340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.525874][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 60.678587][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.963204][ T4347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 61.634534][ T4334] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 61.707800][ T4352] loop2: detected capacity change from 0 to 512 [ 61.715267][ T4334] netlink: 76 bytes leftover after parsing attributes in process `syz.1.208'. [ 61.747131][ T4334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.208'. [ 61.765404][ T4352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.787755][ T4334] 8021q: adding VLAN 0 to HW filter on device bond4 [ 61.802172][ T4352] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.924051][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.970123][ T36] IPVS: starting estimator thread 0... [ 62.018333][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 62.018378][ T29] audit: type=1326 audit(1749247081.956:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4360 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 62.049502][ T29] audit: type=1326 audit(1749247081.956:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4360 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 62.086544][ T4363] loop4: detected capacity change from 0 to 512 [ 62.105955][ T4359] IPVS: using max 2448 ests per chain, 122400 per kthread [ 62.232923][ T4363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.257397][ T4363] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.293636][ T29] audit: type=1326 audit(1749247082.012:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4360 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 62.318229][ T29] audit: type=1326 audit(1749247082.012:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4360 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 62.341903][ T29] audit: type=1326 audit(1749247082.012:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4360 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 62.365349][ T29] audit: type=1326 audit(1749247082.012:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4360 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 62.388997][ T29] audit: type=1326 audit(1749247082.012:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4360 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 62.412587][ T29] audit: type=1326 audit(1749247082.012:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4360 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 62.436010][ T29] audit: type=1326 audit(1749247082.012:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4360 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 62.459415][ T29] audit: type=1326 audit(1749247082.012:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4360 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 62.662017][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.755153][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.861367][ T4374] netlink: 'syz.3.216': attribute type 1 has an invalid length. [ 62.887574][ T4374] netlink: 76 bytes leftover after parsing attributes in process `syz.3.216'. [ 62.926451][ T4374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.216'. [ 62.936804][ T4374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.112692][ T4389] loop2: detected capacity change from 0 to 512 [ 64.122384][ T4389] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.161567][ T4389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.175140][ T4389] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.192087][ T4402] loop1: detected capacity change from 0 to 256 [ 64.202587][ T4396] loop3: detected capacity change from 0 to 512 [ 64.210283][ T4400] loop4: detected capacity change from 0 to 512 [ 64.218515][ T4396] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.252277][ T4402] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 64.269001][ T4396] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 64.272632][ T4400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.278400][ T4396] System zones: 0-2, 18-18, 34-34 [ 64.298098][ T4400] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.331575][ T4396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.361694][ T4396] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.363068][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.398237][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.458448][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.614090][ T4429] loop3: detected capacity change from 0 to 2048 [ 64.627845][ T4432] loop1: detected capacity change from 0 to 256 [ 64.703881][ T3513] loop3: p3 < > p4 < > [ 64.708212][ T3513] loop3: partition table partially beyond EOD, truncated [ 64.715810][ T3513] loop3: p3 start 4284289 is beyond EOD, truncated [ 64.726642][ T4429] loop3: p3 < > p4 < > [ 64.731436][ T4429] loop3: partition table partially beyond EOD, truncated [ 64.740097][ T4429] loop3: p3 start 4284289 is beyond EOD, truncated [ 64.966732][ T4440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.232'. [ 65.612176][ T4448] tipc: Started in network mode [ 65.617433][ T4448] tipc: Node identity be2e55a0cc27, cluster identity 4711 [ 65.624824][ T4448] tipc: Enabled bearer , priority 0 [ 65.667411][ T4444] tipc: Resetting bearer [ 65.687855][ T4444] tipc: Disabling bearer [ 65.813979][ T4460] loop4: detected capacity change from 0 to 512 [ 65.826415][ T4460] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.887282][ T4460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.901089][ T4460] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.993032][ T4457] loop0: detected capacity change from 0 to 512 [ 66.035217][ T4465] loop1: detected capacity change from 0 to 512 [ 66.078619][ T4457] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.181220][ T4465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.233023][ T4457] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 66.249549][ T4457] System zones: 0-2, 18-18, 34-34 [ 66.256294][ T4465] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.259872][ T4457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.289098][ T4457] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.328294][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.342245][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.402173][ T4483] loop0: detected capacity change from 0 to 512 [ 66.499888][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.510860][ T4492] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 66.536378][ T4483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.570986][ T4483] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.634264][ T4481] loop1: detected capacity change from 0 to 1024 [ 66.647126][ T4481] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.660916][ T4486] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.660960][ T4486] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.661055][ T4486] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.661169][ T4486] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.662428][ T4486] bond2: (slave geneve2): making interface the new active one [ 66.662842][ T4486] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 66.703773][ T4486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'. [ 66.706600][ T4481] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 66.911149][ T4481] JBD2: no valid journal superblock found [ 66.918406][ T4481] EXT4-fs (loop1): Could not load journal inode [ 67.780671][ T4481] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 67.799779][ T4507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 67.808831][ T4507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 67.839651][ T4507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 67.859984][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 67.868971][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 67.881895][ T4507] hub 9-0:1.0: USB hub found [ 67.886648][ T4507] hub 9-0:1.0: 8 ports detected [ 67.975879][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 67.975897][ T29] audit: type=1400 audit(1749247087.531:2138): avc: denied { read } for pid=4519 comm="syz.3.256" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 68.006626][ T29] audit: type=1400 audit(1749247087.531:2139): avc: denied { open } for pid=4519 comm="syz.3.256" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 68.078788][ T29] audit: type=1326 audit(1749247087.606:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 68.104030][ T29] audit: type=1326 audit(1749247087.606:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 68.109507][ T4524] unsupported nla_type 52263 [ 68.129200][ T29] audit: type=1326 audit(1749247087.606:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 68.134602][ T4522] loop1: detected capacity change from 0 to 512 [ 68.157860][ T29] audit: type=1326 audit(1749247087.616:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 68.190224][ T29] audit: type=1326 audit(1749247087.616:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 68.215350][ T29] audit: type=1326 audit(1749247087.616:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 68.239814][ T29] audit: type=1326 audit(1749247087.616:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 68.266731][ T29] audit: type=1326 audit(1749247087.616:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4514 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 68.281801][ T4522] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.528145][ T4522] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 68.757182][ T4522] System zones: 0-2, 18-18, 34-34 [ 68.772910][ T4524] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 68.792341][ T4522] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.945885][ T4541] loop4: detected capacity change from 0 to 512 [ 69.024572][ T4541] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.059404][ T4545] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 69.213598][ T4550] loop2: detected capacity change from 0 to 512 [ 69.229904][ T4545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.261'. [ 69.534842][ T4550] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.776441][ T4574] loop2: detected capacity change from 0 to 512 [ 69.869276][ T4574] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.254923][ T4587] loop2: detected capacity change from 0 to 512 [ 70.277802][ T4587] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.295708][ T4585] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.271: corrupted inode contents [ 70.308031][ T4585] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.271: mark_inode_dirty error [ 70.321930][ T4585] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.271: corrupted inode contents [ 70.334320][ T4585] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.271: mark_inode_dirty error [ 70.346146][ T4588] loop4: detected capacity change from 0 to 512 [ 70.347740][ T4585] xt_policy: too many policy elements [ 70.360048][ T4588] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.391370][ T4588] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 70.400008][ T4588] System zones: 0-2, 18-18, 34-34 [ 70.406683][ T4588] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.523017][ T4600] netlink: 'syz.4.274': attribute type 1 has an invalid length. [ 70.549463][ T4600] netlink: 76 bytes leftover after parsing attributes in process `syz.4.274'. [ 70.583141][ T4600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.274'. [ 70.588802][ T4605] netlink: 'syz.0.276': attribute type 1 has an invalid length. [ 70.592958][ T4600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.641385][ T4605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.276'. [ 70.718170][ T4614] loop0: detected capacity change from 0 to 512 [ 70.730083][ T4616] loop1: detected capacity change from 0 to 256 [ 70.894380][ T4614] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.146172][ T4628] loop4: detected capacity change from 0 to 512 [ 71.209074][ T4632] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 71.393603][ T4639] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 71.412297][ T4639] loop2: detected capacity change from 0 to 128 [ 71.525069][ T4642] loop0: detected capacity change from 0 to 512 [ 71.614281][ T4642] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.802880][ T4642] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 71.811428][ T4642] System zones: 0-2, 18-18, 34-34 [ 71.828275][ T4642] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.132566][ T4656] netlink: 'syz.3.290': attribute type 1 has an invalid length. [ 72.147873][ T4662] 9pnet_fd: Insufficient options for proto=fd [ 72.199201][ T4662] loop0: detected capacity change from 0 to 512 [ 72.207376][ T4662] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.319361][ T4662] EXT4-fs mount: 17 callbacks suppressed [ 72.319387][ T4662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.337951][ T4662] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.441768][ T4676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.290'. [ 72.552858][ T4669] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 72.631038][ T4689] loop3: detected capacity change from 0 to 512 [ 72.668360][ T4689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.688918][ T4689] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.758251][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.860757][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.333073][ T4714] netlink: 'syz.4.303': attribute type 1 has an invalid length. [ 73.982111][ T4709] __nla_validate_parse: 1 callbacks suppressed [ 73.982127][ T4709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.303'. [ 74.100991][ T4709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 74.201271][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 74.201285][ T29] audit: type=1326 audit(1749247093.350:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 74.274740][ T4726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 74.274780][ T4728] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 74.297287][ T29] audit: type=1326 audit(1749247093.388:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 74.304347][ T4724] loop4: detected capacity change from 0 to 4096 [ 74.325755][ T29] audit: type=1326 audit(1749247093.388:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 74.357258][ T29] audit: type=1326 audit(1749247093.397:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 74.359039][ T4724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.381630][ T29] audit: type=1326 audit(1749247093.397:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 74.424753][ T29] audit: type=1326 audit(1749247093.397:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 74.451226][ T29] audit: type=1326 audit(1749247093.397:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 74.476036][ T29] audit: type=1326 audit(1749247093.397:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 74.505147][ T29] audit: type=1326 audit(1749247093.397:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 74.529570][ T29] audit: type=1326 audit(1749247093.397:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.1.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 74.689889][ T4734] loop3: detected capacity change from 0 to 512 [ 74.710573][ T4734] EXT4-fs (loop3): too many log groups per flexible block group [ 74.718892][ T4734] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 74.736394][ T4736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 74.745719][ T4736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 74.756707][ T4736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 74.765636][ T4734] EXT4-fs (loop3): mount failed [ 74.768282][ T4736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 74.779866][ T4736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 74.804165][ T4736] hub 9-0:1.0: USB hub found [ 74.815023][ T4736] hub 9-0:1.0: 8 ports detected [ 74.960729][ T4753] loop3: detected capacity change from 0 to 512 [ 74.986589][ T4753] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.009309][ T4753] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 75.019705][ T4753] System zones: 0-2, 18-18, 34-34 [ 75.026935][ T4753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.046191][ T4753] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.101715][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.129871][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.233280][ T4761] 9pnet_fd: Insufficient options for proto=fd [ 75.274723][ T4761] loop2: detected capacity change from 0 to 512 [ 76.084889][ T4761] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.103174][ T4761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.116234][ T4761] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.311951][ T4778] netlink: 'syz.1.316': attribute type 1 has an invalid length. [ 76.327875][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.356439][ T4778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.316'. [ 76.415193][ T4778] 8021q: adding VLAN 0 to HW filter on device bond6 [ 76.695240][ T4787] syz.0.319 uses obsolete (PF_INET,SOCK_PACKET) [ 76.784963][ T4787] netlink: 2564 bytes leftover after parsing attributes in process `syz.0.319'. [ 76.832890][ T4797] loop2: detected capacity change from 0 to 512 [ 76.872103][ T4797] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.887807][ T4797] EXT4-fs (loop2): mount failed [ 76.934175][ T4812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 76.946949][ T4812] hub 9-0:1.0: USB hub found [ 76.951679][ T4812] hub 9-0:1.0: 8 ports detected [ 77.140388][ T4837] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 77.152494][ T4835] IPVS: stopping master sync thread 4837 ... [ 77.196122][ T4840] loop4: detected capacity change from 0 to 512 [ 77.204240][ T4840] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.227578][ T4840] EXT4-fs (loop4): 1 orphan inode deleted [ 77.245155][ T4840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.259423][ T3441] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 77.277024][ T4840] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.292175][ T4840] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.328: iget: bad i_size value: 360287970189639690 [ 77.312239][ T4840] netlink: 'syz.4.328': attribute type 4 has an invalid length. [ 77.328650][ T3441] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 77.342511][ T4840] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.328: iget: bad i_size value: 360287970189639690 [ 77.364245][ T4840] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 77.384636][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.484803][ T4846] 9pnet_fd: Insufficient options for proto=fd [ 77.616546][ T4851] netlink: 'syz.4.330': attribute type 1 has an invalid length. [ 77.689101][ T4848] 8021q: adding VLAN 0 to HW filter on device bond4 [ 77.835195][ T4856] loop4: detected capacity change from 0 to 256 [ 77.910026][ T4856] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 78.283231][ T4878] bridge0: entered promiscuous mode [ 78.379641][ T4878] macvtap1: entered allmulticast mode [ 78.386550][ T4878] bridge0: entered allmulticast mode [ 78.585116][ T4878] bridge0: port 3(macvtap1) entered blocking state [ 78.591914][ T4878] bridge0: port 3(macvtap1) entered disabled state [ 78.698504][ T4878] bridge0: left allmulticast mode [ 78.703677][ T4878] bridge0: left promiscuous mode [ 79.126390][ T4881] loop3: detected capacity change from 0 to 1024 [ 79.147460][ T4881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.160738][ T4881] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.178635][ T4881] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 8: comm syz.3.340: lblock 8 mapped to illegal pblock 8 (length 1) [ 79.193853][ T4881] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117 [ 79.207426][ T4881] EXT4-fs (loop3): This should not happen!! Data will be lost [ 79.207426][ T4881] [ 79.225784][ T4881] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 79.241015][ T4881] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28 [ 79.254009][ T4881] EXT4-fs (loop3): This should not happen!! Data will be lost [ 79.254009][ T4881] [ 79.264899][ T4881] EXT4-fs (loop3): Total free blocks count 0 [ 79.271716][ T4881] EXT4-fs (loop3): Free/Dirty block details [ 79.278469][ T4881] EXT4-fs (loop3): free_blocks=4293918720 [ 79.284837][ T4881] EXT4-fs (loop3): dirty_blocks=480 [ 79.290258][ T4881] EXT4-fs (loop3): Block reservation details [ 79.293729][ T4910] netlink: 'syz.0.344': attribute type 30 has an invalid length. [ 79.307890][ T4910] capability: warning: `syz.0.344' uses 32-bit capabilities (legacy support in use) [ 79.345893][ T1673] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 7) [ 79.552588][ T4919] loop4: detected capacity change from 0 to 512 [ 79.561103][ T4919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.786900][ T4919] EXT4-fs (loop4): orphan cleanup on readonly fs [ 79.797580][ T4919] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.345: bg 0: block 248: padding at end of block bitmap is not set [ 79.813442][ T4919] __quota_error: 337 callbacks suppressed [ 79.813456][ T4919] Quota error (device loop4): write_blk: dquota write failed [ 79.828190][ T4919] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 79.839193][ T4919] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.345: Failed to acquire dquot type 1 [ 79.876930][ T4919] EXT4-fs (loop4): 1 truncate cleaned up [ 79.890279][ T4919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.910093][ T4928] 9pnet_fd: Insufficient options for proto=fd [ 79.945151][ T4919] __nla_validate_parse: 6 callbacks suppressed [ 79.951639][ T4919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.345'. [ 81.040402][ T29] audit: type=1326 audit(1749247099.749:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 81.065464][ T29] audit: type=1326 audit(1749247099.749:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 81.119169][ T4934] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 81.155707][ T4943] sch_fq: defrate 4294967295 ignored. [ 81.258944][ T29] audit: type=1326 audit(1749247099.805:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 81.282405][ T29] audit: type=1326 audit(1749247099.805:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 81.306126][ T29] audit: type=1326 audit(1749247099.805:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 81.329741][ T29] audit: type=1326 audit(1749247099.805:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 81.353062][ T29] audit: type=1326 audit(1749247099.805:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 81.376547][ T29] audit: type=1326 audit(1749247099.805:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 81.631317][ T4953] loop3: detected capacity change from 0 to 256 [ 81.987279][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.833480][ T4979] 9pnet_fd: Insufficient options for proto=fd [ 82.921243][ T4979] loop3: detected capacity change from 0 to 512 [ 82.933367][ T4979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.998878][ T4979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.012952][ T4979] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.433635][ T4999] syzkaller0: entered promiscuous mode [ 83.439286][ T4999] syzkaller0: entered allmulticast mode [ 83.475912][ T4997] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 83.529147][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.583435][ T4999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.367'. [ 83.596634][ T5007] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 83.657846][ T5004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 83.660737][ T5010] sd 0:0:1:0: device reset [ 83.700062][ T5004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 84.286677][ T5042] loop4: detected capacity change from 0 to 512 [ 84.295290][ T5042] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.324899][ T5042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.337947][ T5042] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.473669][ T5020] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 84.517514][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 84.552171][ T5020] netlink: 88 bytes leftover after parsing attributes in process `syz.3.371'. [ 84.934407][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.766288][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 85.766307][ T29] audit: type=1326 audit(1749247104.174:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 85.893271][ T29] audit: type=1326 audit(1749247104.202:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 85.917434][ T29] audit: type=1326 audit(1749247104.202:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 85.941067][ T29] audit: type=1326 audit(1749247104.212:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 85.965668][ T29] audit: type=1326 audit(1749247104.212:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 85.990261][ T29] audit: type=1326 audit(1749247104.212:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 86.014392][ T29] audit: type=1326 audit(1749247104.212:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 86.037967][ T29] audit: type=1326 audit(1749247104.212:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 86.062476][ T29] audit: type=1326 audit(1749247104.212:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 86.086847][ T29] audit: type=1326 audit(1749247104.212:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 86.466660][ T5116] 9pnet_fd: Insufficient options for proto=fd [ 87.396926][ T5120] loop3: detected capacity change from 0 to 256 [ 87.437450][ T5120] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 87.440051][ T5123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 87.719275][ T5127] netlink: 328 bytes leftover after parsing attributes in process `syz.0.382'. [ 87.998410][ T5127] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 88.090609][ T5141] 9pnet_fd: p9_fd_create_unix (5141): problem connecting socket: ./file1: -2 [ 88.212451][ T5153] 9pnet_fd: Insufficient options for proto=fd [ 88.340963][ T5153] loop3: detected capacity change from 0 to 512 [ 88.350748][ T5153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.373750][ T5153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.386971][ T5153] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.426244][ T5159] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 88.571093][ T5159] netlink: 88 bytes leftover after parsing attributes in process `syz.4.387'. [ 88.728192][ T5176] loop4: detected capacity change from 0 to 256 [ 88.766189][ T5176] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 88.835375][ T5179] 9pnet_fd: Insufficient options for proto=fd [ 89.045271][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.396667][ T5192] 9pnet_fd: Insufficient options for proto=fd [ 90.105020][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 91.591969][ T5227] loop3: detected capacity change from 0 to 512 [ 91.628129][ T5227] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.643454][ T5227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.656351][ T5227] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.838491][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.863468][ T5242] netlink: 'syz.1.408': attribute type 30 has an invalid length. [ 91.924824][ T5245] 9pnet_fd: Insufficient options for proto=fd [ 92.247947][ T5252] netlink: 2564 bytes leftover after parsing attributes in process `syz.3.412'. [ 92.318392][ T5254] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 92.333221][ T5250] netlink: 88 bytes leftover after parsing attributes in process `syz.1.411'. [ 92.431765][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 92.431797][ T29] audit: type=1326 audit(1749247110.414:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 92.435092][ T5268] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 92.439141][ T29] audit: type=1326 audit(1749247110.414:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 92.500441][ T29] audit: type=1326 audit(1749247110.414:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 92.526633][ T29] audit: type=1326 audit(1749247110.414:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 92.552921][ T29] audit: type=1326 audit(1749247110.414:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 92.579326][ T29] audit: type=1326 audit(1749247110.414:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 92.605793][ T29] audit: type=1326 audit(1749247110.414:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 92.630794][ T29] audit: type=1326 audit(1749247110.414:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 92.655404][ T29] audit: type=1326 audit(1749247110.414:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 92.681766][ T29] audit: type=1326 audit(1749247110.414:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.2.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 93.084498][ T5285] siw: device registration error -23 [ 93.524382][ T5298] netlink: 'syz.0.425': attribute type 13 has an invalid length. [ 93.584258][ T5298] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.591902][ T5298] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.649734][ T5298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.665872][ T5298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.713495][ T5298] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.723182][ T5298] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.732472][ T5298] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.741634][ T5298] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.766852][ T5298] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 93.776561][ T5298] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 93.786529][ T5298] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 93.796842][ T5298] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 93.820216][ T1034] : Port: 1 Link DOWN [ 93.836090][ T5311] random: crng reseeded on system resumption [ 93.862395][ T5307] tipc: Enabled bearer , priority 0 [ 93.896340][ T5299] tipc: Resetting bearer [ 93.914478][ T5299] tipc: Disabling bearer [ 94.100585][ T5321] loop3: detected capacity change from 0 to 256 [ 94.173639][ T5323] 9pnet_fd: Insufficient options for proto=fd [ 94.190223][ T5323] loop4: detected capacity change from 0 to 512 [ 94.201170][ T5323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.293516][ T5323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.306893][ T5323] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.389480][ T5321] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 94.565744][ T5330] tipc: Started in network mode [ 94.571059][ T5330] tipc: Node identity 0a395284eb56, cluster identity 4711 [ 94.578312][ T5330] tipc: Enabled bearer , priority 0 [ 94.592812][ T5326] tipc: Resetting bearer [ 94.603212][ T5333] netlink: 72 bytes leftover after parsing attributes in process `syz.2.433'. [ 94.607946][ T5326] tipc: Disabling bearer [ 94.903602][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.993208][ T5349] loop4: detected capacity change from 0 to 512 [ 95.011031][ T5351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 95.077678][ T5349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.136608][ T5349] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.399267][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.431666][ T5359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'. [ 95.443462][ T5359] bridge_slave_1: left allmulticast mode [ 95.449503][ T5359] bridge_slave_1: left promiscuous mode [ 95.455571][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.466110][ T5359] bridge_slave_0: left allmulticast mode [ 95.472035][ T5359] bridge_slave_0: left promiscuous mode [ 95.478030][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.555776][ T5365] tipc: Started in network mode [ 95.560978][ T5365] tipc: Node identity a2c8b7cb9296, cluster identity 4711 [ 95.568598][ T5365] tipc: Enabled bearer , priority 0 [ 95.579471][ T5364] tipc: Resetting bearer [ 95.593527][ T5364] tipc: Disabling bearer [ 95.872356][ T5378] 9pnet_fd: Insufficient options for proto=fd [ 95.909128][ T5378] loop4: detected capacity change from 0 to 512 [ 95.927511][ T5378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.960645][ T5378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.973412][ T5378] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.408930][ T5387] 9pnet_fd: Insufficient options for proto=fd [ 96.671839][ T5377] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 96.740607][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.815861][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 96.859245][ T5394] netlink: 'syz.0.449': attribute type 10 has an invalid length. [ 96.867891][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 96.879099][ T5394] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.911542][ T5394] bond0: (slave team0): Enslaving as an active interface with an up link [ 96.921082][ T5031] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 96.935267][ T5403] loop3: detected capacity change from 0 to 512 [ 96.985103][ T5403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.019383][ T5403] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.161879][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.186814][ T5416] tipc: Enabled bearer , priority 0 [ 97.200894][ T5415] tipc: Resetting bearer [ 97.235755][ T5415] tipc: Disabling bearer [ 97.293123][ T5421] netlink: 132 bytes leftover after parsing attributes in process `syz.1.455'. [ 98.289085][ T5433] 9pnet_fd: Insufficient options for proto=fd [ 98.321793][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 98.321816][ T29] audit: type=1326 audit(1749247115.859:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6089abd290 code=0x7ffc0000 [ 98.353561][ T29] audit: type=1326 audit(1749247115.859:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6089abd290 code=0x7ffc0000 [ 98.377411][ T29] audit: type=1326 audit(1749247115.859:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 98.403169][ T29] audit: type=1326 audit(1749247115.859:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 98.428107][ T29] audit: type=1326 audit(1749247115.859:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 98.452541][ T29] audit: type=1326 audit(1749247115.859:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 98.478217][ T29] audit: type=1326 audit(1749247115.859:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 98.503051][ T29] audit: type=1326 audit(1749247115.859:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 98.528561][ T29] audit: type=1400 audit(1749247115.859:3493): avc: denied { mounton } for pid=5427 comm="syz.3.456" path="/proc/315/task" dev="proc" ino=10347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 98.552569][ T29] audit: type=1326 audit(1749247115.859:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5427 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 98.753826][ T5446] sch_fq: defrate 4294967295 ignored. [ 98.776459][ T5445] netlink: 'syz.0.462': attribute type 4 has an invalid length. [ 99.668138][ T5453] 9pnet_fd: Insufficient options for proto=fd [ 99.676006][ T5454] 9pnet_fd: Insufficient options for proto=fd [ 100.285226][ T5451] loop4: detected capacity change from 0 to 512 [ 100.299877][ T5451] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.354121][ T5451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.367067][ T5451] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.583642][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.665958][ T5475] loop4: detected capacity change from 0 to 512 [ 100.670296][ T5472] GUP no longer grows the stack in syz.2.464 (5472): 200000004000-200000008000 (200000002000) [ 100.670423][ T5472] CPU: 0 UID: 0 PID: 5472 Comm: syz.2.464 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 100.670570][ T5472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.670594][ T5472] Call Trace: [ 100.670600][ T5472] [ 100.670606][ T5472] __dump_stack+0x1d/0x30 [ 100.670628][ T5472] dump_stack_lvl+0xe8/0x140 [ 100.670646][ T5472] dump_stack+0x15/0x1b [ 100.670662][ T5472] __get_user_pages+0x199d/0x1fb0 [ 100.670750][ T5472] ? __rcu_read_unlock+0x4f/0x70 [ 100.670791][ T5472] get_user_pages_remote+0x1dc/0x7a0 [ 100.670821][ T5472] __access_remote_vm+0x156/0x560 [ 100.670877][ T5472] access_remote_vm+0x32/0x40 [ 100.670908][ T5472] proc_pid_cmdline_read+0x30f/0x6a0 [ 100.670948][ T5472] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 100.670968][ T5472] vfs_readv+0x3fb/0x690 [ 100.671073][ T5472] ? restore_fpregs_from_fpstate+0x61/0x120 [ 100.671116][ T5472] __x64_sys_preadv+0xfd/0x1c0 [ 100.671150][ T5472] x64_sys_call+0x1503/0x2fb0 [ 100.671185][ T5472] do_syscall_64+0xd2/0x200 [ 100.671208][ T5472] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 100.671242][ T5472] ? clear_bhb_loop+0x40/0x90 [ 100.671268][ T5472] ? clear_bhb_loop+0x40/0x90 [ 100.671299][ T5472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.671323][ T5472] RIP: 0033:0x7fb93a8ee929 [ 100.671352][ T5472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.671378][ T5472] RSP: 002b:00007fb938f36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 100.671474][ T5472] RAX: ffffffffffffffda RBX: 00007fb93ab16080 RCX: 00007fb93a8ee929 [ 100.671492][ T5472] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000007 [ 100.671509][ T5472] RBP: 00007fb93a970b39 R08: 0000000000000200 R09: 0000000000000000 [ 100.671524][ T5472] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 100.671541][ T5472] R13: 0000000000000000 R14: 00007fb93ab16080 R15: 00007ffe76b97458 [ 100.671569][ T5472] [ 100.689476][ T5475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.689662][ T5475] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.825182][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.219279][ T5488] tipc: Started in network mode [ 101.219394][ T5488] tipc: Node identity feecb2331dcd, cluster identity 4711 [ 101.219526][ T5488] tipc: Enabled bearer , priority 0 [ 101.233671][ T5485] loop3: detected capacity change from 0 to 512 [ 101.304423][ T5482] tipc: Resetting bearer [ 101.326076][ T5485] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #32: comm syz.3.469: iget: special inode unallocated [ 101.326296][ T5485] EXT4-fs (loop3): Remounting filesystem read-only [ 101.326323][ T5485] EXT4-fs (loop3): no journal found [ 101.326337][ T5485] EXT4-fs (loop3): can't get journal size [ 101.340791][ T5485] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 101.348072][ T5482] tipc: Disabling bearer [ 101.383351][ T5485] EXT4-fs (loop3): failed to initialize system zone (-117) [ 101.383385][ T5485] EXT4-fs (loop3): mount failed [ 101.418258][ T5487] tipc: Enabled bearer , priority 0 [ 101.428925][ T5486] tipc: Resetting bearer [ 101.441381][ T5486] tipc: Disabling bearer [ 102.425950][ T5510] 9pnet_fd: Insufficient options for proto=fd [ 102.432881][ T5511] 9pnet_fd: Insufficient options for proto=fd [ 103.130342][ T5509] loop4: detected capacity change from 0 to 512 [ 104.136048][ T5509] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.296549][ T5527] 9pnet_fd: Insufficient options for proto=fd [ 105.422518][ T5532] loop3: detected capacity change from 0 to 512 [ 105.429792][ T5509] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4. [ 105.892774][ T5532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.918479][ T5538] netlink: 9 bytes leftover after parsing attributes in process `syz.0.482'. [ 105.977461][ T5538] gretap0: entered promiscuous mode [ 105.984572][ T5532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.997854][ T5532] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.017037][ T5538] netlink: 5 bytes leftover after parsing attributes in process `syz.0.482'. [ 106.028215][ T5538] 0XD: renamed from gretap0 [ 106.035684][ T5538] 0XD: left promiscuous mode [ 106.041320][ T5538] 0XD: entered allmulticast mode [ 106.049406][ T5538] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 106.084855][ T5547] 9pnet_fd: Insufficient options for proto=fd [ 106.241591][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.300309][ T5549] tipc: Enabled bearer , priority 0 [ 106.334610][ T5540] tipc: Resetting bearer [ 106.347398][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 106.393571][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 106.393589][ T29] audit: type=1400 audit(1749247123.474:3942): avc: denied { bind } for pid=5555 comm="syz.3.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.424646][ T5540] tipc: Disabling bearer [ 106.456330][ T5556] loop3: detected capacity change from 0 to 2048 [ 106.492338][ T5556] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.539398][ T5556] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.540125][ T29] audit: type=1400 audit(1749247123.605:3943): avc: denied { setattr } for pid=5555 comm="syz.3.485" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.634999][ T29] audit: type=1400 audit(1749247123.689:3944): avc: denied { write } for pid=5555 comm="syz.3.485" path="socket:[10521]" dev="sockfs" ino=10521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.645784][ T5560] tipc: Enabled bearer , priority 0 [ 106.729857][ T5559] tipc: Resetting bearer [ 106.825249][ T3319] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 106.855115][ T5559] tipc: Disabling bearer [ 106.900483][ T5569] loop3: detected capacity change from 0 to 512 [ 106.991228][ T5571] loop4: detected capacity change from 0 to 512 [ 107.026290][ T5571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.047333][ T5569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.064958][ T5569] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.065028][ T5571] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.114271][ T5573] SELinux: Context system_u:object is not valid (left unmapped). [ 107.133660][ T29] audit: type=1400 audit(1749247124.157:3945): avc: denied { relabelto } for pid=5572 comm="syz.2.491" name="cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 107.160060][ T29] audit: type=1400 audit(1749247124.157:3946): avc: denied { associate } for pid=5572 comm="syz.2.491" name="cgroup.procs" dev="cgroup" ino=200 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 107.201739][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.222397][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.223335][ T29] audit: type=1326 audit(1749247124.241:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 107.255435][ T29] audit: type=1326 audit(1749247124.241:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 107.284486][ T29] audit: type=1326 audit(1749247124.307:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 107.337304][ T5583] netlink: 44 bytes leftover after parsing attributes in process `syz.3.494'. [ 107.346967][ T5583] netlink: 43 bytes leftover after parsing attributes in process `syz.3.494'. [ 107.355993][ T5583] netlink: 'syz.3.494': attribute type 5 has an invalid length. [ 107.363715][ T5583] netlink: 43 bytes leftover after parsing attributes in process `syz.3.494'. [ 107.373751][ T29] audit: type=1326 audit(1749247124.391:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 107.397255][ T29] audit: type=1326 audit(1749247124.391:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5578 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 107.430072][ T5583] 9pnet_virtio: no channels available for device 127.0.0.1 [ 107.465741][ T5583] loop3: detected capacity change from 0 to 1024 [ 107.507448][ T5583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.579478][ T5593] tipc: Enabled bearer , priority 0 [ 107.655533][ T5592] tipc: Resetting bearer [ 107.681563][ T5592] tipc: Disabling bearer [ 107.759983][ T5599] 9pnet_fd: Insufficient options for proto=fd [ 107.894258][ T5603] bridge0: entered promiscuous mode [ 107.900357][ T5603] macvtap1: entered allmulticast mode [ 107.906023][ T5603] bridge0: entered allmulticast mode [ 107.916412][ T5603] bridge0: port 3(macvtap1) entered blocking state [ 107.923454][ T5603] bridge0: port 3(macvtap1) entered disabled state [ 108.015197][ T5603] bridge0: left allmulticast mode [ 108.020705][ T5603] bridge0: left promiscuous mode [ 109.234915][ T5543] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 110.000056][ T5598] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 110.013265][ T5598] EXT4-fs (loop3): This should not happen!! Data will be lost [ 110.013265][ T5598] [ 110.023498][ T5598] EXT4-fs (loop3): Total free blocks count 0 [ 110.029707][ T5598] EXT4-fs (loop3): Free/Dirty block details [ 110.036119][ T5598] EXT4-fs (loop3): free_blocks=68451041280 [ 110.042213][ T5598] EXT4-fs (loop3): dirty_blocks=13760 [ 110.048033][ T5598] EXT4-fs (loop3): Block reservation details [ 110.054403][ T5598] EXT4-fs (loop3): i_reserved_data_blocks=860 [ 110.184665][ T5625] sd 0:0:1:0: device reset [ 110.192721][ T5628] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 110.255521][ T5040] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 110.609997][ T5642] loop4: detected capacity change from 0 to 8192 [ 110.663496][ T5642] vfat: Unknown parameter 'H!1`w )ea뀋-sà_uŪ][_Hqm5W)-3?b5e]C"XG \ZHPX184467440737095516150xffffffffffffffff00000000000000000004' [ 110.958432][ T5642] netlink: 'syz.4.508': attribute type 10 has an invalid length. [ 110.990798][ T5642] team0: Port device netdevsim1 added [ 111.030630][ T5642] netlink: 'syz.4.508': attribute type 10 has an invalid length. [ 111.075498][ T5642] team0: Port device netdevsim1 removed [ 111.092338][ T5642] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 111.115654][ T5646] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 111.155195][ T5650] bond5: entered promiscuous mode [ 111.161009][ T5650] bond5: entered allmulticast mode [ 111.211463][ T5650] 8021q: adding VLAN 0 to HW filter on device bond5 [ 111.243748][ T5650] bond5 (unregistering): Released all slaves [ 111.284707][ T5660] mmap: syz.4.508 (5660) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.376456][ T5666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.515'. [ 111.390154][ T5666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.515'. [ 111.400263][ T5666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.515'. [ 111.491408][ T5665] sd 0:0:1:0: device reset [ 111.616789][ T5680] sd 0:0:1:0: device reset [ 112.853472][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 112.853564][ T29] audit: type=1326 audit(1749247129.518:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 113.272028][ T5691] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 113.310093][ T29] audit: type=1326 audit(1749247129.826:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 113.335934][ T29] audit: type=1326 audit(1749247129.826:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 113.360780][ T29] audit: type=1326 audit(1749247129.826:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 113.385116][ T29] audit: type=1326 audit(1749247129.826:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 113.395507][ T5700] netlink: 'syz.2.524': attribute type 1 has an invalid length. [ 113.410448][ T29] audit: type=1326 audit(1749247129.836:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6089abd290 code=0x7ffc0000 [ 113.441502][ T29] audit: type=1326 audit(1749247129.836:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6089abd290 code=0x7ffc0000 [ 113.441543][ T29] audit: type=1326 audit(1749247129.836:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 113.441614][ T29] audit: type=1326 audit(1749247129.836:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 113.441651][ T29] audit: type=1326 audit(1749247129.836:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 113.544362][ T5705] tipc: Enabled bearer , priority 0 [ 113.686298][ T5710] 9pnet_fd: Insufficient options for proto=fd [ 114.025506][ T5704] tipc: Disabling bearer [ 114.730974][ T5728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 114.831491][ T5719] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 114.929312][ T5723] tipc: Enabled bearer , priority 0 [ 114.965571][ T5719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.530'. [ 114.980924][ T5714] tipc: Resetting bearer [ 115.002289][ T5714] tipc: Disabling bearer [ 116.129708][ T5741] loop4: detected capacity change from 0 to 512 [ 116.161110][ T5741] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.205489][ T5741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.256012][ T5741] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.571568][ T5754] sd 0:0:1:0: device reset [ 116.591311][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.489688][ T5770] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 117.588714][ T5775] lo speed is unknown, defaulting to 1000 [ 117.605542][ T5775] lo speed is unknown, defaulting to 1000 [ 117.638069][ T5775] lo speed is unknown, defaulting to 1000 [ 117.657179][ T5775] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 117.692788][ T5767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 117.722871][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 117.744264][ T5775] lo speed is unknown, defaulting to 1000 [ 117.773854][ T5775] lo speed is unknown, defaulting to 1000 [ 117.800896][ T5775] lo speed is unknown, defaulting to 1000 [ 117.813355][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 117.827582][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 117.838010][ T5775] lo speed is unknown, defaulting to 1000 [ 117.848378][ T5775] lo speed is unknown, defaulting to 1000 [ 118.347184][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 118.347201][ T29] audit: type=1326 audit(1749247134.644:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 118.378668][ T29] audit: type=1326 audit(1749247134.644:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 118.513064][ T5787] tipc: Enabled bearer , priority 0 [ 118.613001][ T5793] bridge0: entered promiscuous mode [ 118.618713][ T5793] macvtap1: entered allmulticast mode [ 118.624243][ T5793] bridge0: entered allmulticast mode [ 118.631921][ T5793] bridge0: port 3(macvtap1) entered blocking state [ 118.638649][ T5793] bridge0: port 3(macvtap1) entered disabled state [ 118.647397][ T5793] bridge0: left allmulticast mode [ 118.652545][ T5793] bridge0: left promiscuous mode [ 118.830231][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 118.848140][ T5785] tipc: Resetting bearer [ 118.876551][ T5785] tipc: Disabling bearer [ 118.925142][ T29] audit: type=1326 audit(1749247135.196:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 118.949366][ T29] audit: type=1326 audit(1749247135.196:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5780 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 119.301616][ T5799] lo speed is unknown, defaulting to 1000 [ 119.563809][ T29] audit: type=1326 audit(1749247135.795:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 119.597601][ T29] audit: type=1326 audit(1749247135.814:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19609cd290 code=0x7ffc0000 [ 119.621164][ T29] audit: type=1326 audit(1749247135.814:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 119.644728][ T29] audit: type=1326 audit(1749247135.814:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 119.661103][ T5807] netlink: 'syz.0.557': attribute type 10 has an invalid length. [ 119.668158][ T29] audit: type=1326 audit(1749247135.814:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 119.668247][ T29] audit: type=1326 audit(1749247135.814:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19609ce929 code=0x7ffc0000 [ 119.712254][ T5812] sd 0:0:1:0: device reset [ 119.746156][ T5814] netlink: 'syz.1.547': attribute type 10 has an invalid length. [ 120.204111][ T5831] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 120.273864][ T5807] team0: Port device netdevsim1 added [ 120.286788][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.297847][ T5814] bond0: (slave team0): Enslaving as an active interface with an up link [ 120.408345][ T5821] bond6: entered promiscuous mode [ 120.413486][ T5821] bond6: entered allmulticast mode [ 120.457632][ T5821] 8021q: adding VLAN 0 to HW filter on device bond6 [ 120.588992][ T5821] bond6 (unregistering): Released all slaves [ 120.722561][ T5841] netlink: 'syz.4.556': attribute type 1 has an invalid length. [ 120.775017][ T5841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.556'. [ 121.085454][ T5852] netlink: 'syz.4.559': attribute type 1 has an invalid length. [ 121.093312][ T5852] netlink: 224 bytes leftover after parsing attributes in process `syz.4.559'. [ 121.283567][ T5851] lo speed is unknown, defaulting to 1000 [ 121.558094][ T5837] smc: net device bond0 applied user defined pnetid SYZ2 [ 121.828954][ T5877] bond7: entered promiscuous mode [ 121.834054][ T5877] bond7: entered allmulticast mode [ 121.839822][ T5877] 8021q: adding VLAN 0 to HW filter on device bond7 [ 121.852927][ T5877] bond7 (unregistering): Released all slaves [ 121.898519][ T5880] loop4: detected capacity change from 0 to 1024 [ 122.034670][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 122.088062][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 122.283646][ T5877] lo speed is unknown, defaulting to 1000 [ 122.918559][ T5899] bridge0: port 3(30XD) entered blocking state [ 122.925241][ T5899] bridge0: port 3(30XD) entered disabled state [ 122.944396][ T5899] 0XD: entered promiscuous mode [ 122.962821][ T5894] netlink: 'syz.1.569': attribute type 1 has an invalid length. [ 123.020502][ T5894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.569'. [ 123.586590][ T5917] loop4: detected capacity change from 0 to 256 [ 123.810857][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 123.810889][ T29] audit: type=1326 audit(1749247139.762:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd79e929 code=0x7ffc0000 [ 123.897789][ T5917] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 123.913362][ T29] audit: type=1326 audit(1749247139.799:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd79e929 code=0x7ffc0000 [ 123.937010][ T29] audit: type=1326 audit(1749247139.799:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0cfd79e929 code=0x7ffc0000 [ 123.960593][ T29] audit: type=1326 audit(1749247139.799:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd79e929 code=0x7ffc0000 [ 123.984054][ T29] audit: type=1326 audit(1749247139.799:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd79e929 code=0x7ffc0000 [ 124.007431][ T29] audit: type=1326 audit(1749247139.818:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0cfd79e929 code=0x7ffc0000 [ 124.030805][ T29] audit: type=1326 audit(1749247139.818:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd79e929 code=0x7ffc0000 [ 124.054203][ T29] audit: type=1326 audit(1749247139.818:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd79e929 code=0x7ffc0000 [ 124.077833][ T29] audit: type=1326 audit(1749247139.818:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f0cfd79e929 code=0x7ffc0000 [ 124.101204][ T29] audit: type=1326 audit(1749247139.818:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd79e929 code=0x7ffc0000 [ 124.457871][ T5942] loop3: detected capacity change from 0 to 256 [ 124.488180][ T5946] syz!: rxe_newlink: already configured on team_slave_0 [ 124.595683][ T5942] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 124.742580][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 124.775794][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 125.054162][ T5993] netlink: 'syz.3.583': attribute type 1 has an invalid length. [ 125.113640][ T5988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.583'. [ 125.297013][ T6005] sd 0:0:1:0: device reset [ 125.587464][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 126.171644][ T6008] tipc: Enabled bearer , priority 0 [ 126.624729][ T5073] tipc: Resetting bearer [ 126.714948][ T6004] tipc: Resetting bearer [ 126.809778][ T6033] netlink: 9 bytes leftover after parsing attributes in process `syz.1.589'. [ 126.820770][ T6004] tipc: Disabling bearer [ 126.919069][ T6036] netlink: 5 bytes leftover after parsing attributes in process `syz.1.589'. [ 127.059066][ T6046] loop3: detected capacity change from 0 to 1024 [ 127.125973][ T6046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.196358][ T6033] gretap0: entered promiscuous mode [ 127.201960][ T6046] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.245315][ T6036] 0XD: renamed from gretap0 [ 127.265372][ T6046] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.591: bg 0: block 393: padding at end of block bitmap is not set [ 127.309746][ T6036] 0XD: left promiscuous mode [ 127.315170][ T6036] 0XD: entered allmulticast mode [ 127.339319][ T6046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.591'. [ 127.386561][ T6036] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 127.496825][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.517469][ T6057] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 128.016313][ T6073] loop4: detected capacity change from 0 to 764 [ 128.064941][ T6073] iso9660: Unknown parameter '1l*/?⌞' [ 128.436224][ T6079] sd 0:0:1:0: device reset [ 129.004088][ T6084] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 129.322539][ T6091] tipc: Enabled bearer , priority 0 [ 129.360492][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 129.360531][ T29] audit: type=1326 audit(1749247144.944:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 129.390276][ T29] audit: type=1326 audit(1749247144.944:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 129.413838][ T29] audit: type=1326 audit(1749247144.944:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 129.437356][ T29] audit: type=1326 audit(1749247144.944:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93a8ee929 code=0x7ffc0000 [ 129.532182][ T6089] tipc: Resetting bearer [ 129.600848][ T6089] tipc: Disabling bearer [ 129.608112][ T6107] netlink: 64 bytes leftover after parsing attributes in process `syz.2.605'. [ 129.614697][ T29] audit: type=1400 audit(1749247145.188:4910): avc: denied { getopt } for pid=6106 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.706300][ T6113] loop4: detected capacity change from 0 to 256 [ 129.761595][ T29] audit: type=1326 audit(1749247145.328:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 129.785400][ T29] audit: type=1326 audit(1749247145.328:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 129.809018][ T29] audit: type=1326 audit(1749247145.337:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 129.832665][ T29] audit: type=1326 audit(1749247145.337:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 129.856428][ T29] audit: type=1326 audit(1749247145.337:4915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6089abe929 code=0x7ffc0000 [ 129.900362][ T6107] lo speed is unknown, defaulting to 1000 [ 129.946776][ T6120] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 130.230478][ T6129] 9pnet_fd: Insufficient options for proto=fd [ 130.275989][ T6129] loop3: detected capacity change from 0 to 512 [ 130.285251][ T6129] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.312358][ T6129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.325163][ T6129] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.968908][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.122072][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 131.160827][ T6140] hsr_slave_0: left promiscuous mode [ 131.166900][ T6140] hsr_slave_1: left promiscuous mode [ 131.191798][ T6149] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 131.231102][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.615'. [ 131.309989][ T6153] loop3: detected capacity change from 0 to 512 [ 131.321104][ T6153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.443273][ T6153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.455980][ T6153] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.750416][ T6163] loop4: detected capacity change from 0 to 256 [ 131.892131][ T6163] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 132.011731][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.061039][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.620'. [ 132.114338][ T6175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.620'. [ 132.123348][ T6175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.620'. [ 132.433942][ T6185] loop4: detected capacity change from 0 to 1024 [ 132.454556][ T6185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.469158][ T6185] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.515673][ T6185] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 3: comm syz.4.625: lblock 3 mapped to illegal pblock 3 (length 13) [ 132.532399][ T6191] 9pnet_fd: Insufficient options for proto=fd [ 132.628388][ T6185] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 132.640961][ T6185] EXT4-fs (loop4): This should not happen!! Data will be lost [ 132.640961][ T6185] [ 132.662818][ T6196] netlink: 830 bytes leftover after parsing attributes in process `syz.0.626'. [ 133.003432][ T6206] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.625: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.133228][ T6184] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.625: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.152910][ T6184] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.625: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.167260][ T6206] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.625: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.181946][ T6206] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.625: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.196871][ T6206] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.625: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.216961][ T6206] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.625: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.242942][ T6184] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.625: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.258721][ T6216] netlink: 'syz.1.629': attribute type 1 has an invalid length. [ 133.276050][ T6206] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #15: block 3: comm syz.4.625: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.320552][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.629'. [ 134.472183][ T6241] loop3: detected capacity change from 0 to 512 [ 134.825200][ T6240] process 'syz.0.635' launched '/dev/fd/7' with NULL argv: empty string added [ 134.935333][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 134.935352][ T29] audit: type=1400 audit(1749247150.071:5114): avc: denied { execute } for pid=6234 comm="syz.0.635" dev="tmpfs" ino=1246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.963064][ T29] audit: type=1400 audit(1749247150.071:5115): avc: denied { execute_no_trans } for pid=6234 comm="syz.0.635" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.995558][ T6241] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.093162][ T6241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.105832][ T6241] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.290401][ T29] audit: type=1326 audit(1749247150.483:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 135.314252][ T29] audit: type=1326 audit(1749247150.483:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 135.338300][ T29] audit: type=1326 audit(1749247150.483:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 135.362103][ T29] audit: type=1326 audit(1749247150.483:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 135.394016][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.495040][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.608692][ T6262] sd 0:0:1:0: device reset [ 135.613250][ T29] audit: type=1326 audit(1749247150.801:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6257 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 135.637224][ T29] audit: type=1326 audit(1749247150.801:5121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6257 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 135.660995][ T29] audit: type=1326 audit(1749247150.801:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6257 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 135.684613][ T29] audit: type=1326 audit(1749247150.801:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6257 comm="syz.0.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e531e929 code=0x7ffc0000 [ 135.828203][ T6271] 9pnet_fd: Insufficient options for proto=fd [ 135.838825][ T6273] netlink: 'syz.4.642': attribute type 1 has an invalid length. [ 135.855216][ T6271] loop3: detected capacity change from 0 to 512 [ 135.966293][ T6273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.642'. [ 136.055229][ T6274] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=235 sclass=netlink_xfrm_socket pid=6274 comm=syz.0.643 [ 136.124483][ T6282] loop4: detected capacity change from 0 to 764 [ 136.178872][ T6282] iso9660: Unknown parameter '1l*/?⌞' [ 136.445673][ T6271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.476725][ T6271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.479185][ T6287] tipc: Enabled bearer , priority 0 [ 136.489611][ T6271] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.522944][ T6285] tipc: Resetting bearer [ 136.543642][ T6285] tipc: Disabling bearer [ 136.690848][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.758959][ T6297] loop3: detected capacity change from 0 to 512 [ 136.787140][ T6297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.839749][ T6294] pimreg3: entered allmulticast mode [ 136.870361][ T6297] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.892097][ T6292] pimreg3: left allmulticast mode [ 136.947356][ T6306] netlink: 'syz.1.652': attribute type 1 has an invalid length. [ 136.972408][ T6306] 8021q: adding VLAN 0 to HW filter on device bond9 [ 137.013995][ T6306] bond9: (slave gretap0): making interface the new active one [ 137.025348][ T6306] bond9: (slave gretap0): Enslaving as an active interface with an up link [ 137.213643][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.963516][ T6341] bridge0: port 3(gretap0) entered blocking state [ 137.970112][ T6341] bridge0: port 3(gretap0) entered disabled state [ 137.989193][ T6341] gretap0: entered allmulticast mode [ 138.000794][ T6341] gretap0: entered promiscuous mode [ 138.009962][ T6341] bridge0: port 3(gretap0) entered blocking state [ 138.016784][ T6341] bridge0: port 3(gretap0) entered forwarding state [ 138.084876][ T6353] netlink: 'syz.2.664': attribute type 1 has an invalid length. [ 138.133534][ T6353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.664'. [ 138.515961][ T6372] sd 0:0:1:0: device reset [ 139.065939][ T6386] loop4: detected capacity change from 0 to 512 [ 139.093950][ T6386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.115744][ T6386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.128785][ T6386] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.665949][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.738756][ T6400] netlink: 'syz.3.676': attribute type 1 has an invalid length. [ 139.773964][ T6400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.676'. [ 139.777869][ T6407] loop4: detected capacity change from 0 to 512 [ 139.875914][ T6407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.892840][ T6407] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.973829][ T6416] netlink: 9 bytes leftover after parsing attributes in process `syz.2.681'. [ 140.000714][ T6416] gretap0: entered promiscuous mode [ 140.040400][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.042966][ T6416] netlink: 5 bytes leftover after parsing attributes in process `syz.2.681'. [ 140.058481][ T6416] 0XD: renamed from gretap0 [ 140.080643][ T6416] 0XD: left promiscuous mode [ 140.082174][ T6427] loop4: detected capacity change from 0 to 256 [ 140.086444][ T6416] 0XD: entered allmulticast mode [ 140.108566][ T6416] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 140.129675][ T6427] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 140.180039][ T6427] ================================================================== [ 140.188201][ T6427] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 140.197883][ T6427] [ 140.200228][ T6427] read to 0xffff88810b8c5000 of 4096 bytes by task 37 on cpu 0: [ 140.207882][ T6427] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 140.213820][ T6427] generic_perform_write+0x2c2/0x490 [ 140.219154][ T6427] shmem_file_write_iter+0xc5/0xf0 [ 140.224307][ T6427] lo_rw_aio+0x5fa/0x7c0 [ 140.228571][ T6427] loop_process_work+0x52d/0xa60 [ 140.233548][ T6427] loop_workfn+0x31/0x40 [ 140.237840][ T6427] process_scheduled_works+0x4cb/0x9d0 [ 140.243444][ T6427] worker_thread+0x582/0x770 [ 140.248090][ T6427] kthread+0x486/0x510 [ 140.252374][ T6427] ret_from_fork+0xda/0x150 [ 140.256906][ T6427] ret_from_fork_asm+0x1a/0x30 [ 140.261702][ T6427] [ 140.264057][ T6427] write to 0xffff88810b8c5c41 of 959 bytes by task 6427 on cpu 1: [ 140.271897][ T6427] copy_folio_from_iter_atomic+0x2d1/0x1170 [ 140.277839][ T6427] generic_perform_write+0x2c2/0x490 [ 140.283166][ T6427] __generic_file_write_iter+0xec/0x120 [ 140.288748][ T6427] generic_file_write_iter+0x8d/0x2f0 [ 140.294160][ T6427] vfs_write+0x49d/0x8e0 [ 140.298438][ T6427] __x64_sys_pwrite64+0xfd/0x150 [ 140.303436][ T6427] x64_sys_call+0xe45/0x2fb0 [ 140.308073][ T6427] do_syscall_64+0xd2/0x200 [ 140.312632][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.318564][ T6427] [ 140.320918][ T6427] Reported by Kernel Concurrency Sanitizer on: [ 140.327096][ T6427] CPU: 1 UID: 0 PID: 6427 Comm: syz.4.685 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 140.339105][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.349186][ T6427] ================================================================== [ 140.391156][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 140.391174][ T29] audit: type=1326 audit(1749247155.272:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd79e929 code=0x7ffc0000 [ 140.422144][ T29] audit: type=1326 audit(1749247155.282:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfd79e929 code=0x7ffc0000