last executing test programs: 4.342454203s ago: executing program 3 (id=1075): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000001600)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ab}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r7, 0x0, 0x3, 0x800000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) pwrite64(r8, &(0x7f0000000140)='2', 0x1, 0xfec9) 3.593968599s ago: executing program 1 (id=1077): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000540006803c0004"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 3.299782978s ago: executing program 0 (id=1080): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0xf}, 0x1c, 0x0, 0x0) write$selinux_validatetrans(r0, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81, 0x24) r7 = openat(r6, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, &(0x7f00000001c0)) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89b1, &(0x7f0000000040)={'bond0\x00', @random="18faff000020"}) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @mcast1, 0x3}, 0x1c) sendmmsg(r5, &(0x7f0000007c40)=[{{&(0x7f0000000280)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)="f4", 0x1}], 0x1}}], 0x1, 0x20000050) getsockopt$MRT(r8, 0x0, 0xcf, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000500)=@raw=[@alu={0x7, 0x0, 0x6, 0x0, 0x3, 0x0, 0xfffffffffffffff0}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], &(0x7f0000000600)='syzkaller\x00', 0x3, 0x79, &(0x7f0000000640)=""/121, 0x40f00, 0x40, '\x00', 0x0, 0x1b, r7, 0x8, &(0x7f00000006c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x3, 0x3, 0xe16}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000740)=[r1, r7, 0xffffffffffffffff, r7, r7, r7, 0xffffffffffffffff, r7, r1], &(0x7f0000000780)=[{0x5, 0x1, 0x10, 0x2}], 0x10, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r10) write$binfmt_register(r7, &(0x7f0000000400)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xff4b, 0x3a, ']^', 0x3a, '-', 0x3a, './file1', 0x3a, [0x43, 0x4f, 0x43, 0x4f, 0x46, 0x46]}, 0x30) 3.139227185s ago: executing program 1 (id=1081): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x4000, 0x1, 0x3}, 0x18) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', 0x2dc402, 0xe5) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200"], 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f00000001c0)}, 0x20) pwrite64(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x8000c61) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000340), &(0x7f0000000240)=r3}, 0x36) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/config\x00') read$qrtrtun(r4, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) 2.794960829s ago: executing program 0 (id=1085): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x4000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r1 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='attr\x00') unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x200) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000880)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000800)={0x7, &(0x7f00000007c0)=[{0x0, 0x40, 0x9, 0x6}, {0x7, 0x4f, 0xd7, 0x6}, {0x5, 0x0, 0x6, 0xebf6}, {0x0, 0xf9, 0x9, 0x4}, {0xf7a0, 0x3, 0x1, 0x2}, {0x1, 0x81, 0x81, 0x1}, {0x1000, 0x5, 0x6, 0x100}]}) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) close(r5) 2.793585989s ago: executing program 2 (id=1086): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000000000001170999a6932e614ce65e52f218737ba90231e4f333c8e67cc4dccaf719ed46d35c3d29211942cc9785123840d5f2a3497e35457727e001ce140c72b240a03adabb826831378eadca11afb90c6086e5640b7f34783b53dc1e07a31643e27395cccc246d51b339b656241216e6cd56af30c0"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\a\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000cd40009800800014000000006c80002800c0001800800014000000003", @ANYRES8=r2], 0x140}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x14, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x3, 0x8, 0x3, 0x99ad}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x8800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_usb_connect$rtl8150(0x7, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000280)='ext4_ext_load_extent\x00'}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x5, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4804}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x1b, r6, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.792929779s ago: executing program 3 (id=1087): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x40941) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000280)={0x7a89, 0x612d, 0x1, 'queue0\x00', 0x1000f215}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8008001) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10007ffffffff}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r6, r5) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1) close_range(r4, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="4e6ab8c784c3fc8b48a45151c23681c57d82c6558b2cbbf27ffa97c4aed9c2ec2bb9f4a687653ad93fb39940944896"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYRES64=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r8}, 0x18) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) r9 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r9, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 2.642366604s ago: executing program 3 (id=1089): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0xa0100) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000500)={0xe000200c}) creat(&(0x7f0000000040)='./bus\x00', 0x182) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) close(r3) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0x10f9d, @private2, 0x3}}}, 0x32) open(&(0x7f0000000340)='./bus\x00', 0x4c27e, 0x153) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000c40)={0x0, 0x0, 0xfffffffe}) ioctl$MON_IOCX_GETX(r4, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x13, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.581006351s ago: executing program 1 (id=1090): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x47a, &(0x7f0000000180)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x10980, 0x90) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$inet(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x7}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x0, 0x7ff}}]}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xcc}}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0xfd, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) statfs(&(0x7f0000000200)='.\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001f80), 0x4081, 0x0) close_range(0xffffffffffffffff, r3, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 2.458071053s ago: executing program 3 (id=1091): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000001600)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ab}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r7, 0x0, 0x3, 0x800000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) pwrite64(r8, &(0x7f0000000140)='2', 0x1, 0xfec9) 2.399277579s ago: executing program 0 (id=1092): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000540006803c0004"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 2.152719874s ago: executing program 2 (id=1095): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x23}, @loopback, 0x0, "ce98c257a3cf4ad8d33dddf7996c6a8438cc19363dbe7dea12f455b9c7742022", 0x4, 0xfffffff8, 0x7dbb, 0x2}, 0x3c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x5ef9, &(0x7f0000000280)={0x0, 0x3b4f, 0x1, 0x3, 0x14}, &(0x7f0000000240)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x7dd6, 0x8029, 0x1, 0x0, 0x0) io_uring_enter(r4, 0x0, 0xe876, 0x3, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000001540)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r6, 0x0, 0x7}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x8d, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x125, &(0x7f0000001580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="54526bd3ea2d", @val={@val={0x88a8, 0x7}, {0x8100, 0x2, 0x1, 0x2}}, {@ipv4={0x800, @icmp={{0x2c, 0x4, 0x3, 0x7, 0x10f, 0x67, 0x0, 0x4f, 0x1, 0x0, @local, @local, {[@timestamp={0x44, 0x1c, 0x38, 0x0, 0x2, [0x8001, 0x6, 0xb29, 0x9, 0x36c, 0x4]}, @rr={0x7, 0x17, 0x25, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1]}, @generic={0x82, 0xe, "10073ffda145f3d52140a220"}, @timestamp_prespec={0x44, 0x1c, 0x1f, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x4}, {@empty, 0x9}]}, @generic={0x88, 0x4, "d828"}, @cipso={0x86, 0x1d, 0x0, [{0x6, 0x3, "1f"}, {0x2, 0x2}, {0x2, 0x12, "61731b3c6a7ebee3f51684185d9c11c1"}]}, @generic={0x44, 0x12, "f3560b587ddd9bafbdd83ff8d02b09a1"}, @generic={0x44, 0x9, "94fc60ca621bc0"}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x14, 0x4, 0x2, 0x0, 0x7, 0x66, 0xfff2, 0x9, 0x84, 0x9, @loopback, @multicast2, {[@noop, @lsrr={0x83, 0x7, 0x3c, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x86, 0xe, "67ca8951a866aa754ce486fe"}, @lsrr={0x83, 0x23, 0xb, [@loopback, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x17}, @rand_addr=0x64010102, @empty]}]}}, "5ee2cdeb1dc613"}}}}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000040)={0xc, 0x2, 0x2, 0x58, 0x0, [@remote]}, 0x18) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x11, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r11}, 0x18) r12 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r12, r1, 0x0, 0x7ffff000) 1.841234065s ago: executing program 2 (id=1097): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r5, &(0x7f0000000100)=""/44, 0xbb) syz_clone3(&(0x7f0000000640)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x22}, &(0x7f0000000580)=""/162, 0xa2, &(0x7f0000000300)=""/18, &(0x7f0000000340)=[r0, r0, r0, r0, r0, r0, r0, r0], 0x8, {r5}}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x40, 0x112) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) 1.39070834s ago: executing program 1 (id=1098): ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000340)) socket$rds(0x15, 0x5, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd79, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r2}, 0x18) finit_module(r0, 0x0, 0x3) r3 = socket$igmp(0x2, 0x3, 0x2) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x440) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x804) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000000bc0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000f5c60004000000ff0f00"], 0x48) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000bd000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000af808103c9d47c27eb55c4dc24"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 1.118050777s ago: executing program 0 (id=1100): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c40)=ANY=[@ANYBLOB="090000000000000002004e21e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002004e20e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac14142800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf66a77ccf38fb54f6640c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1faf46527d94a6f2ad3358ff51fbee96897771e90414446dee84a220ce7d295d142d15c3ff300a27be329f158ee846d8209475697fb0a1da768504b42ba259245d0fa2275af8c17646ac1ffb5c1bab0"], 0x290) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000280)={@remote, r9}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r9, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) dup2(r7, r8) r10 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)="d8", 0x1, r10) keyctl$search(0xa, r10, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r6) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 1.033338586s ago: executing program 4 (id=1101): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400080, 0xb0) socket$inet6(0xa, 0x80002, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x3, @mcast1, 0x80000000}], 0x4c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0xbffffffd, &(0x7f00000009c0)={0x10, 0x3ff, 0x4}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 994.19615ms ago: executing program 1 (id=1102): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x54029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4000, 0x40000000318, 0x0, 0x1, 0x0, 0x101}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000040)=0x2, 0x4) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x2b, 0xa, 0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe2981) write$sndseq(r2, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) gettid() write$P9_RGETLOCK(r2, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) fcntl$setpipe(r1, 0x407, 0x8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x3ff, &(0x7f0000000500)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) set_mempolicy_home_node(&(0x7f0000cc6000/0x3000)=nil, 0x3000, 0x1, 0x0) 882.270821ms ago: executing program 2 (id=1103): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@usrjquota}]}, 0xfe, 0x563, &(0x7f00000007c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x644200, 0x40) mknodat(0xffffffffffffffff, 0x0, 0x4142, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000102c0)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x2}, 0x18) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r4, &(0x7f0000005640)=ANY=[@ANYRES16=r6], 0x69) close(r4) fcntl$setlease(r2, 0x400, 0x1) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xfff1}, {0xc, 0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc010) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x84, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @fallback=0x29}, 0x94) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000040), 0x80000000002, 0x1) close_range(r7, 0xffffffffffffffff, 0x0) 881.170141ms ago: executing program 4 (id=1104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfc, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) getrlimit(0x7, &(0x7f0000000480)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) getdents64(r3, &(0x7f0000000fc0)=""/224, 0xe0) timerfd_create(0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80003, 0xff) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x100) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r6 = gettid() process_vm_writev(r6, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001800356a00000000000000000a80809b9ecb48f000ff030006000000001400010000000000000000019332e473a28de1cb7d08d687a3a357b106d3fa171c8c7b0884f66470f020b1d72bff94"], 0x30}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bind$xdp(r4, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x3}, 0x10) 770.927673ms ago: executing program 0 (id=1105): socket$inet6(0xa, 0x3, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={&(0x7f00000004c0)="20ed9e644c28a73697633ed7b3b269e2aab6d7337f8891fdd7c02a59dbc28577cdc7c11b4d524928e3861ef63cfde460d7f897bfdb23ab501d4194e93b5f0ce804873afacad558a44fd981d26afd1dcc6cd6635c7856290e51ee5c5b9c9d68d7f73ccb907496f074098d46e46a09a8b0ca4311c3e766083ae5ad98fc6e16a5faf96d31f8e8f266ad587add36699b31132dc065abe101d90dca0b0954c5b6042bcdce6bea125f2aa3397d2480f3e988bfea32afb5a01c67f90f", &(0x7f0000000580)=""/179, &(0x7f0000000640)="664b76b3c62333f42ee61bcb2f14869d506ef9ed7b282a038df6c295d82a025d4a40c9cb36616dfbd05b8f8b1c5234479c2c0cac5c6ef1c87da859038526184dffd3f6221ac2191276ef0ec1ea09bd4bc5b18423d1fbf9042ad5222665db10e699aa0475b598f60db8754150e33e2db1a09addb1439457ef4b3ea062635585c1c705128a3587528fa6df5e538b2a937d", &(0x7f0000000700)="0d0e319fd603f14312b18a1550752bfd60bbe68162fbec944a686b2ce70fef88b014a237e9effba28de5433f02a9856704d8ba15556bc13e0ca5521c81a471a426de24eaaab8763516805bdd7f230d212cb8e80c2dcc3a2687bc228cf987a49743a16a90d88278f107b3655a05a7c18e2f70304d2e20ddac72f1dbd74cd1ffab493458ef87eae5afbefdcb6701a25d0c25f466e7a01687b9452b3b832abb5c116580", 0x200, r0}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0xf) r4 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)='6', 0x1}], 0x1}}], 0x1, 0x24088804) sendto$inet6(0xffffffffffffffff, &(0x7f0000000ec0)='\n', 0x1, 0x40000, &(0x7f0000000300)={0xa, 0x100, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}, 0x4}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x9, 0x1}, 0xc) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000840)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xdbQ1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x800000000006}, 0x18) iopl(0x2) r5 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="0002000000000000000000000000000000000000004d7b10"], 0x18) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f8}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r5], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000002480)=0x3) close_range(r6, 0xffffffffffffffff, 0x0) 714.108618ms ago: executing program 4 (id=1107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000100000095000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000001340), 0x1, 0x60a, &(0x7f0000000600)="$eJzs3c9rHNcdAPDvzEqqZKuVXYqpTUsFPdhQrB+uqduebF/qg6GG+lBCDhaW5AivbGHJEDuGyJBDAgmEkGsIvuQfyD2YXHMLgSS3nANOCA45JMEbZnbHXla78lrR/pDn84FZvXkzu+999+lp3uzo7QRQWtPZQxpxOCIuJRFTTdsmo75xurHfw+/uXM6WJGq1/32bRNLIK/Z/1Pi5P3tIIsYj4tOzEb+vbC13/dbtqwvVWt2rEbMbq2uz67duH19ZXbiydGXp2vyJf548Nfev+ZPzuxJnEde58//901uvvfSP5c+qx5M4HRdHX1mMljh2y3RMx6NGiM35IxFxKku0eV/2miKEZMD1YGcqjd/H0Yg4FFNRydfqpmLlzYFWDuipWiWiBpRUov9DSRXjgOLcvhfnwcPswZn6CdDW+Efqn43EeH5utO9h0nRmVD/fPbAL5Wdl/HznyHvZEh0+hxjZhXI62bwbEX9sF3+S1+1A/ilOFn8aadPzsvRcRIw13ot0h+VPt6z3+/fvWeJvbocs3tONn1n+2R2WP+j4ASin+2caB/LNbO3J8S8bGRbjn2gz/plsc+zaiUEf/zqP/4rj/Xj+GXnaMg7LxjwX2r/kaGvGV2+ce6dT+c3jv2zJyi/Ggv3w4G7EkZb4X88Hc8nj9k/atH+2y6Uuy/jP59+c67Rt0PHX7kUcbXv+8+SKVpaa3VhdK/Jark/OLq9Ul+bqj23L+OiTFz/oVP6g48/aPzrEv137Z3lrXZbx4YV7q522TT41/vTrseRinhpr5Ly8sLFxYz5iLDnf2KUp/8T2dSn2KV4ji//YX9v3/23izxt6s8v41/5/9WE9tfUqadftv+WvSu5Rrcs6dJLFv7jD9n+7yzJ+eOHmn1uyJorEdvFPbH2ppNv3HAAAAAAAAMooza/BJunM43SazszU5/D+Ifal1evrG39bvn7z2mLEsfz/IUfT4kr3VH09ydbnG/8PW6yfaFn/e0QcjIh3KxP5+szl69XFQQcPAAAAAAAAAAAAAAAAAAAAQ2J/Y/5/cZ/q7yv1+f9d2TjU49oBPdfLG8wBw03/h/LK+/9O7+AK7GmO/1Be+j+Ul/4P5aX/Q3np/1Be+j+Ul/4P5aX/AwAAAMBz6eBf7n+ZRMTmvyfyJTPW2DY60JoBvfbsfXy6J/UA+q/S16cBw+TxpX/T/6F0uhr//9j4csDeVwcYgKRdZj44qG3f+e+3fSYAAAAAAAAAAAAA0ANHD5v/D2WVxseDrgIwIL9iIr/vAIA9zlf/Q3k5xweeNot/vNMG8/8BAAAAAAAAAAAAoG8m8yVJZxq3AJ2MNJ2ZifhtRByI0WR5pbo0FxG/i4gvKqO/ydbnB11pAAAAAAAAAAAAAAAAAAAAeM6s37p9daFaXbrRnPhpS87znSjugjos9WlORNL/QiciYhhi701ipCknidjMWn4oKnZjPYaiGmlejQH/YQIAAAAAAAAAAAAAAAAAgBJqmnvc3pH3+1wjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOi/J/f/33kiecrrDDpGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBv+iUAAP//q+Q5KA==") r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7800, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @rand_addr=0x64010102}}}}) openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x141080, 0x0) socket$inet6(0xa, 0x2, 0x0) 640.350996ms ago: executing program 3 (id=1108): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0xa}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0, 0x0, 0x1000000000000000}, 0x18) set_robust_list(0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) close(r1) r3 = socket$inet(0x2, 0x2, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x5, r4}, 0x38) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000500e69cee8b11534e37456b0200"/27], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket(0x10, 0x80003, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) close_range(r7, 0xffffffffffffffff, 0x0) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)="08001497733f5d3e", 0x8}, {&(0x7f00000001c0)="826f2a51975baed36683d43ea120a9fd0fea1033ad96bf2ffdeb1746d5f806c4f4e283189f06174cbbe80f33ce2ba5f1bf6be4ceb80b127336a137be1fb7d5dcd420e4a046809209714373e58248553aa67b907ff139acb1d4ce2134872b8ad9a28a079ab90c65831f99ee6a6d21ff156d9c975b02ba22114dbc4adba78859c9bda39a264708162221ebb8859bd96b81061c7397a4a212dbdee0e4b49c89b59d9689184ec63e1c570d4c6e3522535ecef3d7b64e46c4bc6c300648f2f75a40bb6b156cee850f8ba522f9dc892b1daf22b319d474d1e81e49", 0xd8}, {&(0x7f00000005c0)="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", 0xf00}, {&(0x7f0000000040)="e84e5d209f6e96b8c121b64daf5495bc356ddfb64847f2d6069561f9be273ea051fc5ba304a7f04ead500e3a888df52097420b2e0aa1deb4372a4b310a1d9ee268c1eeb5fd3e7e8810c7", 0x4a}, {&(0x7f0000000340)="ca6fb2c04edbeca1a3a0bbb477230d7c84d91a8ae6c812f8dd3d82627db0a80e690e8f30bcdcaa971bcce25422073bb11afc73a401b889950c1d046a1c895018081f0e34404a3d2312ecfce19bb774702ca05a03978117734efc75c73d8ff98f95862c2a413cac594964cd0b189f6d87ec000000000000000000000063107aea0000000000000000", 0x88}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x2004000) 560.820374ms ago: executing program 0 (id=1109): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1d, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095", @ANYRES8=r0, @ANYRES32=r3, @ANYRES64=r0, @ANYRES16=r8], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 560.248184ms ago: executing program 2 (id=1110): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = io_uring_setup(0x4d3f, &(0x7f0000000d80)={0x0, 0xca6a, 0x20, 0x2003, 0x2f8}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480), 0x66) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x72, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r4, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[], 0x64}}, 0x0) r5 = gettid() r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone(0x80308400, &(0x7f0000000440)="344f00805feeeabca054883ff05bfcd5a56c3a1547ae3113ef67df05fd5d768054ab2e5e6435d22c36da91daf138d55506b219938774dbcdf9786c002f782de5f1217e284a847add180c4fb8e55f615a5081e02fa1767884a2daca5f2c21cb43d8d8e3a413335386fef0f86a8911301433694b9cc16854ab9dcd27c03da70b36d20be499e3950f01966d1ebeebb6a6d7b721635c512f2bdbc977e11acbed5a957f2afcac9103a612a2ca7246529906f636947b02574836d87a0ddd251a95d6c1de1514abbea8632b798512e747", 0xcd, 0x0, &(0x7f0000000200), &(0x7f00000009c0)="db3a34addb368c988c7e7c1e2deea367981a2d96d0b530d294b9c38a16a4548147f3be5e5b3a446458bec7d77bcdc2c585e337aa49d82e85beabb2e1db7e3913c216a3959541b8b7081b9a8a8af2c29a1243c46d61dcc9b81bdb7d38f31e67287d4431247b77ae415e5d612d0258319e1af64820bd724ce38126a4877dd05c859163391cdca45a30aaf5ba5ca84a41ea6061ecebea550bb8aac017e29d6c7ab60d18e8e5c68228955a08d5b73f58154b564da443203a3a36d0ca5c1658ac572a3c7b270f0c") read$ptp(r6, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) syz_open_procfs(0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16}) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@dioread_nolock}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@errors_continue}]}, 0x1, 0x476, &(0x7f0000000540)="$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") chmod(&(0x7f0000000000)='./file0\x00', 0x60) 421.061937ms ago: executing program 3 (id=1111): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x100000001) creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0x24, 0x18, 0x111, 0x70bd29, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2000}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4805}, 0x4) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') syz_read_part_table(0x1053, &(0x7f0000001080)="$eJzsz8EJwlAQBND5MYkBPaQDtRR70H4C9uLBArxaik1YgPhREAtQD+9ddmGGhQ0/dk1K0iRllsdaPvI2mSe5ZVFb3fCWTetNDtsmGZJyWWZKcly90u45+5RxTJtzpvTZlVqvl/enb3wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/uHgAA//+AkQhu") r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7, 0x0, 0x100}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x10}, 0x18) 172.913812ms ago: executing program 4 (id=1112): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) syz_emit_ethernet(0x42, &(0x7f0000000240)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0xc, 0x3c, 0x0, @local, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000001c0)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffe) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 115.109029ms ago: executing program 1 (id=1113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x47a, &(0x7f0000000180)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x10980, 0x90) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$inet(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x7}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x0, 0x7ff}}]}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xcc}}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0xfd, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) statfs(&(0x7f0000000200)='.\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001f80), 0x4081, 0x0) close_range(0xffffffffffffffff, r3, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 44.990186ms ago: executing program 4 (id=1114): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@empty, 0x0}, &(0x7f0000000380)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000020300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01c21668f6d1d66edb251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) r5 = syz_open_dev$evdev(&(0x7f0000000ec0), 0x23d, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4}}, @typedef={0x3, 0x0, 0x0, 0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x2e, 0x5f]}}, 0x0, 0x66}, 0x28) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000000f00)={{0x0, 0xb, 0x400, 0x6, 0x9, 0x7, 0x1, 0x6, 0xb7c, 0x1, 0x4, 0x1, 0x9, 0x0, 0x7}}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000800) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000e40)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0xffffffff, 0x3, "000080f100df0000009c6783d29c0800"}) r8 = syz_open_pts(r7, 0x42) r9 = dup3(r8, r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x7fff}, 0x18) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(r12) mount$9p_xen(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2002000, &(0x7f0000000280)={'trans=xen,', {[{@uname={'uname', 0x3d, '\'.$\']\x0e^:'}}, {@access_any}, {@ignoreqv}, {@privport}, {@version_L}, {@version_L}, {@cache_fscache}, {@msize}], [{@subj_type={'subj_type', 0x3d, '\x14\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '/selinux/policy\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/selinux/policy\x00'}}]}}) 0s ago: executing program 4 (id=1115): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) personality(0x0) r5 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x100, 0x4, 0x20}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000140)=[{0x0}], 0x1) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') r6 = socket(0x10, 0x2, 0x0) syz_io_uring_setup(0x538b, &(0x7f00000002c0)={0x0, 0xffa3, 0x21, 0x0, 0x217, 0x0, r5}, &(0x7f0000000340), &(0x7f0000000380)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], &(0x7f00000005c0), 0x2}, 0x20) sendfile(r1, r0, 0x0, 0x7ffff000) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) kernel console output (not intermixed with test programs): 000-0000-000000000000. [ 145.210607][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.212879][ T6594] loop2: detected capacity change from 0 to 512 [ 145.219015][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.226029][ T6594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.241562][ T3408] vhci_hcd: vhci_device speed not set [ 145.247577][ T6594] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.746: invalid block [ 145.259772][ T6594] EXT4-fs (loop2): Remounting filesystem read-only [ 145.266724][ T6594] EXT4-fs (loop2): 2 truncates cleaned up [ 145.273005][ T6594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.381573][ T6598] lo speed is unknown, defaulting to 1000 [ 145.387646][ T6598] wg1 speed is unknown, defaulting to 1000 [ 145.393876][ T6598] lo speed is unknown, defaulting to 1000 [ 145.421421][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.483383][ T6602] netlink: 'syz.2.733': attribute type 1 has an invalid length. [ 145.506034][ T6602] bond3: entered promiscuous mode [ 145.511313][ T6602] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.530022][ T6602] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.537370][ T6602] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 145.547929][ T6602] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 145.560101][ T6602] bond3: (slave wireguard0): making interface the new active one [ 145.567973][ T6602] wireguard0: entered promiscuous mode [ 145.575636][ T6602] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 145.597148][ T6602] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.604598][ T6602] IPv6: NLM_F_CREATE should be set when creating new route [ 145.611819][ T6602] IPv6: NLM_F_CREATE should be set when creating new route [ 145.619333][ T6602] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.632386][ T6602] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 145.645647][ T6602] bond3: (slave wireguard1): Enslaving as a backup interface with an up link [ 145.771650][ T6610] lo speed is unknown, defaulting to 1000 [ 145.796101][ T6612] loop2: detected capacity change from 0 to 764 [ 145.809068][ T6610] wg1 speed is unknown, defaulting to 1000 [ 145.830660][ T6612] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 145.842592][ T6610] lo speed is unknown, defaulting to 1000 [ 145.883176][ T6613] loop3: detected capacity change from 0 to 764 [ 146.022685][ T6619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.734'. [ 146.130599][ T6625] loop2: detected capacity change from 0 to 512 [ 146.185389][ T6621] loop3: detected capacity change from 0 to 4096 [ 146.196814][ T6625] vlan2: entered allmulticast mode [ 146.201999][ T6625] hsr0: entered allmulticast mode [ 146.202157][ T6621] EXT4-fs: test_dummy_encryption option not supported [ 146.207031][ T6625] hsr_slave_0: entered allmulticast mode [ 146.207047][ T6625] hsr_slave_1: entered allmulticast mode [ 146.353394][ T6630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.756'. [ 146.382599][ T6630] netlink: 'syz.0.756': attribute type 10 has an invalid length. [ 146.391316][ T6630] batman_adv: batadv0: Removing interface: dummy0 [ 146.437483][ T6630] dummy0: entered promiscuous mode [ 146.454473][ T6628] loop2: detected capacity change from 0 to 8192 [ 146.463075][ T6630] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 146.492284][ T6628] program syz.2.745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.522846][ T6634] loop4: detected capacity change from 0 to 512 [ 146.530084][ T6634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.539722][ T6636] netlink: 'syz.0.747': attribute type 39 has an invalid length. [ 146.550033][ T6634] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.748: invalid block [ 146.564015][ T6634] EXT4-fs (loop4): Remounting filesystem read-only [ 146.576067][ T6634] EXT4-fs (loop4): 2 truncates cleaned up [ 146.611107][ T6634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.729340][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.740254][ T6643] netlink: 'syz.0.749': attribute type 1 has an invalid length. [ 146.765101][ T6643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.793615][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 146.811746][ T6643] bond0 (unregistering): Released all slaves [ 146.830663][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.751'. [ 146.910543][ T6654] netlink: 'syz.4.752': attribute type 21 has an invalid length. [ 146.973834][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.754'. [ 146.982606][ T6658] bond0: entered promiscuous mode [ 146.987840][ T6658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.007772][ T6658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.015253][ T6658] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 147.025832][ T6658] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 147.029573][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 147.043864][ T6658] bond0: (slave wireguard0): making interface the new active one [ 147.051767][ T6658] wireguard0: entered promiscuous mode [ 147.062212][ T6665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.069521][ T6665] IPv6: NLM_F_CREATE should be set when creating new route [ 147.076744][ T6665] IPv6: NLM_F_CREATE should be set when creating new route [ 147.090980][ T6658] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 147.102502][ T6665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.117932][ T6665] bond0: (slave wireguard1): The slave device specified does not support setting the MAC address [ 147.135184][ T6665] bond0: (slave wireguard1): Enslaving as a backup interface with an up link [ 147.184967][ T6671] lo speed is unknown, defaulting to 1000 [ 147.186596][ T6675] loop3: detected capacity change from 0 to 512 [ 147.191328][ T6671] wg1 speed is unknown, defaulting to 1000 [ 147.203404][ T6671] lo speed is unknown, defaulting to 1000 [ 147.213185][ T6675] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.219831][ T6675] EXT4-fs: Ignoring removed bh option [ 147.242882][ T6676] loop4: detected capacity change from 0 to 764 [ 147.252436][ T6675] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 147.267205][ T6675] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.758: corrupted inode contents [ 147.269104][ T6679] loop2: detected capacity change from 0 to 512 [ 147.279256][ T6675] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #11: comm syz.3.758: mark_inode_dirty error [ 147.297341][ T6679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.297516][ T6675] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.758: invalid indirect mapped block 1 (level 1) [ 147.304096][ T6679] EXT4-fs: Ignoring removed bh option [ 147.317560][ T6675] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.758: corrupted inode contents [ 147.334367][ T6676] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 147.334690][ T6675] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 147.344120][ T6679] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 147.365795][ T6679] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.759: corrupted inode contents [ 147.372100][ T6675] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.758: corrupted inode contents [ 147.389856][ T6675] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.758: mark_inode_dirty error [ 147.389799][ T6679] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.759: mark_inode_dirty error [ 147.412744][ T6679] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.759: invalid indirect mapped block 1 (level 1) [ 147.412872][ T6675] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 147.430651][ T6679] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.759: corrupted inode contents [ 147.434949][ T6675] EXT4-fs (loop3): 1 truncate cleaned up [ 147.452823][ T6675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.470687][ T6679] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 147.482768][ T6679] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.759: corrupted inode contents [ 147.495529][ T6679] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.759: mark_inode_dirty error [ 147.507197][ T6679] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 147.516567][ T6679] EXT4-fs (loop2): 1 truncate cleaned up [ 147.522820][ T6679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.536799][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.554237][ T6682] xt_hashlimit: size too large, truncated to 1048576 [ 147.561395][ T6679] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.759: path /147/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 147.709904][ T29] kauditd_printk_skb: 1014 callbacks suppressed [ 147.709922][ T29] audit: type=1400 audit(403.677:53465): avc: denied { mounton } for pid=6683 comm="syz.3.761" path="/143/file0" dev="tmpfs" ino=822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 147.716580][ T6684] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 147.741336][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.761'. [ 147.747352][ T29] audit: type=1400 audit(403.717:53466): avc: denied { mount } for pid=6683 comm="syz.3.761" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 147.792715][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.805451][ T6691] loop4: detected capacity change from 0 to 512 [ 147.817398][ T6691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.827412][ T6691] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.763: invalid block [ 147.839757][ T6691] EXT4-fs (loop4): Remounting filesystem read-only [ 147.842283][ T6695] lo speed is unknown, defaulting to 1000 [ 147.846473][ T6691] EXT4-fs (loop4): 2 truncates cleaned up [ 147.858150][ T6691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.863030][ T6695] wg1 speed is unknown, defaulting to 1000 [ 147.879213][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'. [ 147.882175][ T29] audit: type=1326 audit(403.857:53467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 147.888885][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.762'. [ 147.910909][ T29] audit: type=1326 audit(403.857:53468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 147.911447][ T6695] lo speed is unknown, defaulting to 1000 [ 147.948654][ T29] audit: type=1326 audit(403.887:53469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 147.971655][ T29] audit: type=1326 audit(403.887:53470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 147.994575][ T29] audit: type=1326 audit(403.887:53471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 148.017554][ T29] audit: type=1326 audit(403.887:53472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 148.040563][ T29] audit: type=1326 audit(403.887:53473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 148.063602][ T29] audit: type=1326 audit(403.887:53474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 148.104927][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.148837][ T6704] loop4: detected capacity change from 0 to 4096 [ 148.155979][ T6704] EXT4-fs: test_dummy_encryption option not supported [ 148.179217][ T6703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.187914][ T6703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.669478][ T6710] validate_nla: 3 callbacks suppressed [ 148.669518][ T6710] netlink: 'syz.0.769': attribute type 21 has an invalid length. [ 148.833498][ T6714] SELinux: ebitmap: truncated map [ 148.848491][ T6714] SELinux: failed to load policy [ 148.858327][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.771'. [ 148.877616][ T6714] lo speed is unknown, defaulting to 1000 [ 148.884073][ T6714] wg1 speed is unknown, defaulting to 1000 [ 148.890551][ T6714] lo speed is unknown, defaulting to 1000 [ 149.011852][ T6721] xt_hashlimit: size too large, truncated to 1048576 [ 149.091197][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 149.155352][ T6726] lo speed is unknown, defaulting to 1000 [ 149.162282][ T6726] wg1 speed is unknown, defaulting to 1000 [ 149.174973][ T6726] lo speed is unknown, defaulting to 1000 [ 149.301391][ T6731] lo speed is unknown, defaulting to 1000 [ 149.307700][ T6731] wg1 speed is unknown, defaulting to 1000 [ 149.314050][ T6731] lo speed is unknown, defaulting to 1000 [ 149.663348][ T6735] tipc: Started in network mode [ 149.668364][ T6735] tipc: Node identity e0000001, cluster identity 4711 [ 149.675193][ T6735] tipc: Enabling of bearer rejected, failed to enable media [ 149.714365][ T6736] netlink: 'syz.3.774': attribute type 1 has an invalid length. [ 149.746450][ T6736] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.763821][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.774'. [ 149.774114][ T6736] bond2 (unregistering): Released all slaves [ 150.004454][ T6744] loop4: detected capacity change from 0 to 164 [ 150.018744][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'. [ 150.165347][ T6751] futex_wake_op: syz.2.780 tries to shift op by -1; fix this program [ 150.652208][ T6759] lo speed is unknown, defaulting to 1000 [ 150.658432][ T6759] wg1 speed is unknown, defaulting to 1000 [ 150.664694][ T6759] lo speed is unknown, defaulting to 1000 [ 150.725216][ T6761] netlink: 'syz.1.781': attribute type 13 has an invalid length. [ 150.765439][ T6761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.189692][ T6744] netlink: 'syz.4.778': attribute type 13 has an invalid length. [ 151.205184][ T6744] gretap0: refused to change device tx_queue_len [ 151.211965][ T6744] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 151.257577][ T6768] lo speed is unknown, defaulting to 1000 [ 151.263784][ T6768] wg1 speed is unknown, defaulting to 1000 [ 151.269947][ T6768] lo speed is unknown, defaulting to 1000 [ 151.523333][ T6782] hub 8-0:1.0: USB hub found [ 151.528670][ T6782] hub 8-0:1.0: 8 ports detected [ 151.561077][ T6782] loop4: detected capacity change from 0 to 1024 [ 151.569385][ T6782] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 151.579277][ T6782] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 151.589077][ T6782] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 151.600536][ T6782] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: inode #5: comm syz.4.789: unexpected bad inode w/o EXT4_IGET_BAD [ 151.614195][ T6782] EXT4-fs (loop4): no journal found [ 151.619419][ T6782] EXT4-fs (loop4): can't get journal size [ 151.721960][ T6782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.509261][ T6788] lo speed is unknown, defaulting to 1000 [ 152.515719][ T6788] wg1 speed is unknown, defaulting to 1000 [ 152.522130][ T6788] lo speed is unknown, defaulting to 1000 [ 152.840475][ T29] kauditd_printk_skb: 861 callbacks suppressed [ 152.840496][ T29] audit: type=1326 audit(408.577:54336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 152.869651][ T29] audit: type=1326 audit(408.577:54337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 153.063199][ T6790] lo speed is unknown, defaulting to 1000 [ 153.099927][ T6790] wg1 speed is unknown, defaulting to 1000 [ 153.112225][ T6790] lo speed is unknown, defaulting to 1000 [ 153.170513][ T29] audit: type=1326 audit(409.047:54338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0942c46567 code=0x7ffc0000 [ 153.193335][ T29] audit: type=1326 audit(409.047:54339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0942beb789 code=0x7ffc0000 [ 153.216045][ T29] audit: type=1326 audit(409.047:54340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0942c46567 code=0x7ffc0000 [ 153.238897][ T29] audit: type=1326 audit(409.047:54341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0942beb789 code=0x7ffc0000 [ 153.261703][ T29] audit: type=1326 audit(409.047:54342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0942c46567 code=0x7ffc0000 [ 153.284512][ T29] audit: type=1326 audit(409.047:54343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0942beb789 code=0x7ffc0000 [ 153.307231][ T29] audit: type=1326 audit(409.047:54344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0942c46567 code=0x7ffc0000 [ 153.329946][ T29] audit: type=1326 audit(409.047:54345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0942beb789 code=0x7ffc0000 [ 153.539339][ T6793] loop3: detected capacity change from 0 to 764 [ 153.606534][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.687488][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.696004][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.883804][ T6793] __nla_validate_parse: 1 callbacks suppressed [ 153.883836][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 154.070715][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.793'. [ 154.273674][ T6808] netlink: 32 bytes leftover after parsing attributes in process `syz.2.796'. [ 154.345427][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.795'. [ 154.592419][ T6813] futex_wake_op: syz.3.797 tries to shift op by -1; fix this program [ 155.202646][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.809'. [ 155.353869][ T6817] netlink: 'syz.1.798': attribute type 13 has an invalid length. [ 155.365355][ T6817] gretap0: refused to change device tx_queue_len [ 155.372147][ T6817] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 155.404528][ T6819] netlink: 'syz.2.808': attribute type 21 has an invalid length. [ 155.553364][ T6833] xt_hashlimit: size too large, truncated to 1048576 [ 155.643503][ T6831] netlink: 'syz.1.800': attribute type 3 has an invalid length. [ 155.651678][ T6831] netlink: 'syz.1.800': attribute type 3 has an invalid length. [ 155.879745][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.802'. [ 155.889428][ T6839] netem: change failed [ 155.911895][ T6839] netlink: 'syz.2.802': attribute type 10 has an invalid length. [ 155.920359][ T6839] batman_adv: batadv0: Removing interface: dummy0 [ 156.350595][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.359268][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.459445][ T6854] block device autoloading is deprecated and will be removed. [ 156.553015][ T6853] netlink: 'syz.1.806': attribute type 3 has an invalid length. [ 156.561764][ T6853] netlink: 'syz.1.806': attribute type 3 has an invalid length. [ 156.889638][ T6859] smc: net device bond0 applied user defined pnetid SYZ0 [ 156.900754][ T6859] smc: net device bond0 erased user defined pnetid SYZ0 [ 157.567107][ T6879] block device autoloading is deprecated and will be removed. [ 157.603272][ T6877] SELinux: ebitmap: truncated map [ 157.639435][ T6877] SELinux: failed to load policy [ 157.682437][ T6880] lo speed is unknown, defaulting to 1000 [ 157.763805][ T6880] wg1 speed is unknown, defaulting to 1000 [ 157.843827][ T6880] lo speed is unknown, defaulting to 1000 [ 157.995889][ T6891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.816'. [ 158.015007][ T6891] netem: change failed [ 158.065011][ T29] kauditd_printk_skb: 3407 callbacks suppressed [ 158.065026][ T29] audit: type=1326 audit(414.037:57753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 158.094198][ T29] audit: type=1326 audit(414.037:57754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 158.118025][ T6891] netlink: 'syz.4.816': attribute type 10 has an invalid length. [ 158.122795][ T29] audit: type=1326 audit(414.037:57755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 158.148680][ T29] audit: type=1326 audit(414.037:57756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 158.171615][ T29] audit: type=1326 audit(414.037:57757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 158.194454][ T29] audit: type=1326 audit(414.097:57758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 158.204747][ T6893] loop4: detected capacity change from 0 to 1024 [ 158.217177][ T29] audit: type=1326 audit(414.097:57759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 158.246492][ T29] audit: type=1326 audit(414.097:57760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 158.269343][ T29] audit: type=1326 audit(414.097:57761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 158.292068][ T29] audit: type=1326 audit(414.097:57762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 158.314967][ T6889] netlink: 'syz.2.817': attribute type 3 has an invalid length. [ 158.324075][ T6889] netlink: 'syz.2.817': attribute type 3 has an invalid length. [ 158.333085][ T6891] batman_adv: batadv0: Removing interface: dummy0 [ 158.351194][ T6893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.394389][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.418999][ T6902] loop4: detected capacity change from 0 to 512 [ 158.437917][ T6902] vlan3: entered allmulticast mode [ 158.443204][ T6902] hsr0: entered allmulticast mode [ 158.448260][ T6902] hsr_slave_0: entered allmulticast mode [ 158.454013][ T6902] hsr_slave_1: entered allmulticast mode [ 158.536112][ T6905] loop3: detected capacity change from 0 to 128 [ 158.602168][ T6909] loop4: detected capacity change from 0 to 4096 [ 158.608916][ T6905] bio_check_eod: 204 callbacks suppressed [ 158.608997][ T6905] syz.3.820: attempt to access beyond end of device [ 158.608997][ T6905] loop3: rw=1, sector=145, nr_sectors = 16 limit=128 [ 158.694544][ T6905] syz.3.820: attempt to access beyond end of device [ 158.694544][ T6905] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 158.743377][ T6909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.761728][ T6905] syz.3.820: attempt to access beyond end of device [ 158.761728][ T6905] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 158.892420][ T6905] syz.3.820: attempt to access beyond end of device [ 158.892420][ T6905] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 159.035499][ T6905] syz.3.820: attempt to access beyond end of device [ 159.035499][ T6905] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 159.054993][ T6905] syz.3.820: attempt to access beyond end of device [ 159.054993][ T6905] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 159.081933][ T6905] syz.3.820: attempt to access beyond end of device [ 159.081933][ T6905] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 159.169928][ T6920] lo speed is unknown, defaulting to 1000 [ 159.176613][ T6920] wg1 speed is unknown, defaulting to 1000 [ 159.183125][ T6920] lo speed is unknown, defaulting to 1000 [ 159.672496][ T6905] syz.3.820: attempt to access beyond end of device [ 159.672496][ T6905] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 159.704015][ T6926] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 159.710645][ T6926] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.718239][ T6926] vhci_hcd vhci_hcd.0: Device attached [ 159.737022][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.773816][ T6905] syz.3.820: attempt to access beyond end of device [ 159.773816][ T6905] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 159.801067][ T6905] syz.3.820: attempt to access beyond end of device [ 159.801067][ T6905] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 159.820363][ T6926] SELinux: policydb version 704780991 does not match my version range 15-35 [ 159.861045][ T6926] SELinux: failed to load policy [ 159.869110][ T6931] loop4: detected capacity change from 0 to 512 [ 159.894098][ T6931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.900833][ T6931] EXT4-fs: Ignoring removed bh option [ 159.908303][ T6927] vhci_hcd: connection closed [ 159.909581][ T12] vhci_hcd: stop threads [ 159.918613][ T12] vhci_hcd: release socket [ 159.923061][ T12] vhci_hcd: disconnect device [ 159.927821][ T3408] vhci_hcd: vhci_device speed not set [ 159.942002][ T6931] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 159.965986][ T6931] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.826: corrupted inode contents [ 160.000341][ T6931] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.826: mark_inode_dirty error [ 160.014472][ T6931] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.826: invalid indirect mapped block 1 (level 1) [ 160.030275][ T6931] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.826: corrupted inode contents [ 160.052921][ T6931] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 160.061894][ T6931] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.826: corrupted inode contents [ 160.074183][ T6931] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.826: mark_inode_dirty error [ 160.085849][ T6936] loop3: detected capacity change from 0 to 128 [ 160.086397][ T6931] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 160.093880][ T6936] FAT-fs (loop3): Directory bread(block 162) failed [ 160.101652][ T6931] EXT4-fs (loop4): 1 truncate cleaned up [ 160.108289][ T6936] FAT-fs (loop3): Directory bread(block 163) failed [ 160.114421][ T6931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.120110][ T6936] FAT-fs (loop3): Directory bread(block 164) failed [ 160.138979][ T6936] FAT-fs (loop3): Directory bread(block 165) failed [ 160.144800][ T6931] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.826: path /156/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 160.145788][ T6936] FAT-fs (loop3): Directory bread(block 166) failed [ 160.173745][ T6936] FAT-fs (loop3): Directory bread(block 167) failed [ 160.180388][ T6936] FAT-fs (loop3): Directory bread(block 168) failed [ 160.187344][ T6936] FAT-fs (loop3): Directory bread(block 169) failed [ 160.220289][ T6936] FAT-fs (loop3): Directory bread(block 162) failed [ 160.226997][ T6936] FAT-fs (loop3): Directory bread(block 163) failed [ 160.258977][ T6942] loop3: detected capacity change from 0 to 2048 [ 160.271903][ T6942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.341089][ T6935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.351467][ T6935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.671127][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.874270][ T6955] SELinux: ebitmap: truncated map [ 160.950326][ T6956] lo speed is unknown, defaulting to 1000 [ 160.956489][ T6955] SELinux: failed to load policy [ 160.982591][ T6956] wg1 speed is unknown, defaulting to 1000 [ 161.001059][ T6956] lo speed is unknown, defaulting to 1000 [ 161.649369][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 161.682146][ T6966] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 161.693822][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 161.738899][ T6966] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 161.764388][ T6967] netlink: 36 bytes leftover after parsing attributes in process `syz.4.833'. [ 161.766750][ T6969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.834'. [ 161.866187][ T6969] validate_nla: 2 callbacks suppressed [ 161.866204][ T6969] netlink: 'syz.1.834': attribute type 30 has an invalid length. [ 161.971206][ T6977] loop2: detected capacity change from 0 to 512 [ 161.998001][ T6977] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.004750][ T6977] EXT4-fs: Ignoring removed bh option [ 162.109975][ T6977] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 162.177151][ T6977] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.838: corrupted inode contents [ 162.335347][ T6977] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.838: mark_inode_dirty error [ 162.521264][ T6977] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.838: invalid indirect mapped block 1 (level 1) [ 162.884263][ T6977] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.838: corrupted inode contents [ 163.018463][ T6977] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 163.080480][ T29] kauditd_printk_skb: 2090 callbacks suppressed [ 163.080498][ T29] audit: type=1326 audit(419.047:59853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa9deca6567 code=0x7ffc0000 [ 163.109548][ T29] audit: type=1326 audit(419.047:59854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9dec4b789 code=0x7ffc0000 [ 163.132493][ T29] audit: type=1326 audit(419.047:59855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa9deca6567 code=0x7ffc0000 [ 163.155213][ T29] audit: type=1326 audit(419.047:59856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9dec4b789 code=0x7ffc0000 [ 163.178004][ T29] audit: type=1326 audit(419.047:59857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa9deca6567 code=0x7ffc0000 [ 163.200709][ T29] audit: type=1326 audit(419.047:59858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9dec4b789 code=0x7ffc0000 [ 163.223483][ T29] audit: type=1326 audit(419.047:59859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa9deca6567 code=0x7ffc0000 [ 163.246288][ T29] audit: type=1326 audit(419.047:59860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9dec4b789 code=0x7ffc0000 [ 163.264783][ T6977] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.838: corrupted inode contents [ 163.269055][ T29] audit: type=1326 audit(419.047:59861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa9deca6567 code=0x7ffc0000 [ 163.303392][ T29] audit: type=1326 audit(419.047:59862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz.1.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9dec4b789 code=0x7ffc0000 [ 163.348888][ T6990] loop4: detected capacity change from 0 to 1024 [ 163.370244][ T6977] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.838: mark_inode_dirty error [ 163.384461][ T6990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 163.405251][ T6990] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 163.450445][ T6977] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 163.470496][ T6977] EXT4-fs (loop2): 1 truncate cleaned up [ 163.476514][ T6977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.489522][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.499970][ T6993] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.840: lblock 3 mapped to illegal pblock 3 (length 1) [ 163.560679][ T6977] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.838: path /164/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 163.636468][ T6993] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 163.648783][ T6993] EXT4-fs (loop4): This should not happen!! Data will be lost [ 163.648783][ T6993] [ 163.673561][ T6996] loop3: detected capacity change from 0 to 512 [ 163.680056][ T6996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.686879][ T6996] EXT4-fs: Ignoring removed bh option [ 163.794818][ T6990] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 4: comm syz.4.840: lblock 4 mapped to illegal pblock 4 (length 2) [ 163.843441][ T6990] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 163.855778][ T6990] EXT4-fs (loop4): This should not happen!! Data will be lost [ 163.855778][ T6990] [ 163.881395][ T6996] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 163.924559][ T6996] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.842: corrupted inode contents [ 163.939725][ T6977] netlink: 'syz.2.838': attribute type 3 has an invalid length. [ 163.987676][ T6977] netlink: 'syz.2.838': attribute type 3 has an invalid length. [ 164.030615][ T6996] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #11: comm syz.3.842: mark_inode_dirty error [ 164.050735][ T67] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 164.069452][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.090718][ T6996] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.842: invalid indirect mapped block 1 (level 1) [ 164.116105][ T67] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 164.128590][ T67] EXT4-fs (loop4): This should not happen!! Data will be lost [ 164.128590][ T67] [ 164.140803][ T6996] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.842: corrupted inode contents [ 164.140988][ T6996] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 164.141097][ T6996] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.842: corrupted inode contents [ 164.141320][ T6996] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.842: mark_inode_dirty error [ 164.141424][ T6996] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 164.141604][ T6996] EXT4-fs (loop3): 1 truncate cleaned up [ 164.141951][ T6996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.143292][ T6996] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.842: path /157/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 164.149636][ T7001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.845'. [ 164.151739][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 164.163009][ T7001] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 164.170807][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.843'. [ 164.276952][ T7005] loop2: detected capacity change from 0 to 4096 [ 164.281390][ T7005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.382329][ T7010] loop4: detected capacity change from 0 to 512 [ 164.383753][ T7010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.383774][ T7010] EXT4-fs: Ignoring removed bh option [ 164.421507][ T7010] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 164.421571][ T7010] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.847: corrupted inode contents [ 164.421870][ T7010] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.847: mark_inode_dirty error [ 164.422063][ T7010] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.847: invalid indirect mapped block 1 (level 1) [ 164.422368][ T7010] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.847: corrupted inode contents [ 164.422472][ T7010] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 164.422642][ T7010] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.847: corrupted inode contents [ 164.422856][ T7010] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.847: mark_inode_dirty error [ 164.423023][ T7010] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 164.423232][ T7010] EXT4-fs (loop4): 1 truncate cleaned up [ 164.423598][ T7010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.425189][ T6996] netlink: 'syz.3.842': attribute type 3 has an invalid length. [ 164.425222][ T6996] netlink: 'syz.3.842': attribute type 3 has an invalid length. [ 164.425692][ T7010] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.847: path /162/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 164.464369][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.576291][ T7018] kernel profiling enabled (shift: 17) [ 164.820089][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'. [ 164.850281][ T7017] bond0: mtu less than device minimum [ 164.920978][ T7019] netlink: 120 bytes leftover after parsing attributes in process `syz.3.849'. [ 165.216282][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.235646][ T7010] netlink: 'syz.4.847': attribute type 3 has an invalid length. [ 165.315547][ T7010] netlink: 'syz.4.847': attribute type 3 has an invalid length. [ 165.355382][ T7022] batman_adv: batadv0: Interface deactivated: dummy0 [ 165.362151][ T7022] batman_adv: batadv0: Removing interface: dummy0 [ 165.376375][ T7022] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.418130][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.850'. [ 165.419336][ T7030] netlink: 4788 bytes leftover after parsing attributes in process `syz.1.852'. [ 165.468234][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.526415][ T7038] loop0: detected capacity change from 0 to 128 [ 165.535047][ T7038] bio_check_eod: 103 callbacks suppressed [ 165.535061][ T7038] syz.0.857: attempt to access beyond end of device [ 165.535061][ T7038] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 165.555028][ T7038] syz.0.857: attempt to access beyond end of device [ 165.555028][ T7038] loop0: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 165.578996][ T7038] syz.0.857: attempt to access beyond end of device [ 165.578996][ T7038] loop0: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 165.592399][ T7038] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 165.603481][ T7038] syz.0.857: attempt to access beyond end of device [ 165.603481][ T7038] loop0: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 165.618011][ T7038] syz.0.857: attempt to access beyond end of device [ 165.618011][ T7038] loop0: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 165.631363][ T7038] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 165.640488][ T7038] syz.0.857: attempt to access beyond end of device [ 165.640488][ T7038] loop0: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 165.655249][ T7038] syz.0.857: attempt to access beyond end of device [ 165.655249][ T7038] loop0: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 165.668782][ T7038] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 165.681787][ T7038] syz.0.857: attempt to access beyond end of device [ 165.681787][ T7038] loop0: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 165.713047][ T7038] syz.0.857: attempt to access beyond end of device [ 165.713047][ T7038] loop0: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 165.726432][ T7038] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 165.754518][ T7038] syz.0.857: attempt to access beyond end of device [ 165.754518][ T7038] loop0: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 165.777093][ T7038] Buffer I/O error on dev loop0, logical block 108, lost async page write [ 165.794870][ T7052] €Â: renamed from vlan1 [ 165.798387][ T7038] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 165.824031][ T4676] IPVS: starting estimator thread 0... [ 165.824870][ T7038] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 165.862077][ T7058] netlink: 'syz.4.861': attribute type 4 has an invalid length. [ 165.871163][ T7038] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 165.889120][ T7038] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 165.897820][ T7040] loop3: detected capacity change from 0 to 32768 [ 165.900445][ T7038] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 165.913234][ T7056] IPVS: using max 2784 ests per chain, 139200 per kthread [ 165.950933][ T7040] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 165.956308][ T7040] loop3: p1 start 460800 is beyond EOD, truncated [ 165.962838][ T7040] loop3: p2 size 83886080 extends beyond EOD, truncated [ 165.971264][ T7040] loop3: p5 start 460800 is beyond EOD, truncated [ 165.977862][ T7040] loop3: p6 size 83886080 extends beyond EOD, truncated [ 165.981169][ T7066] vhci_hcd: invalid port number 255 [ 166.002631][ T7066] loop4: detected capacity change from 0 to 512 [ 166.009566][ T7066] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.016481][ T7066] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 166.027583][ T7066] EXT4-fs (loop4): 1 truncate cleaned up [ 166.043805][ T7066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.076098][ T7072] loop0: detected capacity change from 0 to 512 [ 166.088836][ T7072] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.095584][ T7072] EXT4-fs: Ignoring removed bh option [ 166.102280][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.109360][ T7072] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 166.125893][ T7072] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.865: corrupted inode contents [ 166.137814][ T7072] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #11: comm syz.0.865: mark_inode_dirty error [ 166.149341][ T7072] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.865: invalid indirect mapped block 1 (level 1) [ 166.162629][ T7072] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.865: corrupted inode contents [ 166.174701][ T7072] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 166.184961][ T7072] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.865: corrupted inode contents [ 166.196947][ T7072] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.865: mark_inode_dirty error [ 166.208226][ T7072] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 166.217566][ T7072] EXT4-fs (loop0): 1 truncate cleaned up [ 166.223695][ T7072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.238497][ T7072] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.865: path /192/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 166.238883][ T7083] netlink: 'syz.4.866': attribute type 1 has an invalid length. [ 166.260756][ T7082] lo: entered allmulticast mode [ 166.276037][ T7082] tunl0: entered allmulticast mode [ 166.290668][ T7082] gre0: entered allmulticast mode [ 166.296084][ T7082] gretap0: entered allmulticast mode [ 166.311432][ T7082] erspan0: entered allmulticast mode [ 166.317018][ T7082] ip_vti0: entered allmulticast mode [ 166.330757][ T7082] ip6_vti0: entered allmulticast mode [ 166.336375][ T7082] sit0: entered allmulticast mode [ 166.341820][ T7082] ip6tnl0: entered allmulticast mode [ 166.347354][ T7082] ip6gre0: entered allmulticast mode [ 166.357304][ T7082] syz_tun: entered allmulticast mode [ 166.363010][ T7082] ip6gretap0: entered allmulticast mode [ 166.370876][ T7082] vcan0: entered allmulticast mode [ 166.376282][ T7082] team0: entered allmulticast mode [ 166.381519][ T7082] team_slave_0: entered allmulticast mode [ 166.387302][ T7082] team_slave_1: entered allmulticast mode [ 166.393476][ T7082] dummy0: entered allmulticast mode [ 166.398974][ T7082] nlmon0: entered allmulticast mode [ 166.404687][ T7082] caif0: entered allmulticast mode [ 166.410020][ T7082] batadv0: entered allmulticast mode [ 166.415670][ T7082] veth0: entered allmulticast mode [ 166.421039][ T7082] veth1: entered allmulticast mode [ 166.426349][ T7082] wg0: entered allmulticast mode [ 166.431695][ T7082] wg1: entered allmulticast mode [ 166.436846][ T7082] wg2: entered allmulticast mode [ 166.441887][ T7082] veth0_to_bridge: entered allmulticast mode [ 166.448149][ T7082] bridge_slave_0: entered allmulticast mode [ 166.454339][ T7082] veth1_to_bridge: entered allmulticast mode [ 166.460522][ T7082] bridge_slave_1: entered allmulticast mode [ 166.466804][ T7082] veth0_to_bond: entered allmulticast mode [ 166.472903][ T7082] bond_slave_0: entered allmulticast mode [ 166.478743][ T7082] veth1_to_bond: entered allmulticast mode [ 166.485032][ T7082] bond_slave_1: entered allmulticast mode [ 166.491021][ T7082] veth0_to_team: entered allmulticast mode [ 166.497477][ T7082] veth1_to_team: entered allmulticast mode [ 166.503874][ T7082] veth0_to_batadv: entered allmulticast mode [ 166.510096][ T7082] batadv_slave_0: entered allmulticast mode [ 166.517135][ T7082] veth1_to_batadv: entered allmulticast mode [ 166.523487][ T7082] batadv_slave_1: entered allmulticast mode [ 166.529583][ T7082] xfrm0: entered allmulticast mode [ 166.534945][ T7082] veth0_to_hsr: entered allmulticast mode [ 166.541109][ T7082] veth1_to_hsr: entered allmulticast mode [ 166.547353][ T7082] veth1_virt_wifi: entered allmulticast mode [ 166.553683][ T7082] veth0_virt_wifi: entered allmulticast mode [ 166.559925][ T7082] veth1_vlan: entered allmulticast mode [ 166.566121][ T7082] vlan0: entered allmulticast mode [ 166.571554][ T7082] vlan1: entered allmulticast mode [ 166.576890][ T7082] macvlan0: entered allmulticast mode [ 166.582523][ T7082] macvlan1: entered allmulticast mode [ 166.588470][ T7082] ipvlan1: entered allmulticast mode [ 166.594015][ T7082] veth1_macvtap: entered allmulticast mode [ 166.600031][ T7082] veth0_macvtap: entered allmulticast mode [ 166.606072][ T7082] macvtap0: entered allmulticast mode [ 166.611647][ T7082] macsec0: entered allmulticast mode [ 166.617136][ T7082] geneve0: entered allmulticast mode [ 166.623025][ T7082] geneve1: entered allmulticast mode [ 166.628629][ T7099] netlink: 'syz.3.869': attribute type 6 has an invalid length. [ 166.636658][ T7082] netdevsim netdevsim2 eth0: entered allmulticast mode [ 166.643792][ T7082] netdevsim netdevsim2 eth1: entered allmulticast mode [ 166.650805][ T7082] netdevsim netdevsim2 eth2: entered allmulticast mode [ 166.658010][ T7082] netdevsim netdevsim2 eth3: entered allmulticast mode [ 166.665006][ T7082] bridge0: entered allmulticast mode [ 166.670664][ T7082] ip6gre1: entered allmulticast mode [ 166.676206][ T7082] bond0: entered allmulticast mode [ 166.682598][ T7082] bond1: entered allmulticast mode [ 166.688699][ T7082] sit1: entered allmulticast mode [ 166.694166][ T7082] bond2: entered allmulticast mode [ 166.700194][ T7082] macvlan2: entered allmulticast mode [ 166.705903][ T7082] bond3: entered allmulticast mode [ 166.711050][ T7082] wireguard0: entered allmulticast mode [ 166.718373][ T7082] wireguard1: entered allmulticast mode [ 166.724940][ T7082] syztnl1: entered allmulticast mode [ 166.730307][ T7082] bridge1: entered allmulticast mode [ 166.736172][ T7082] syzkaller0: entered allmulticast mode [ 166.752065][ T7084] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 166.763013][ T7084] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 166.794655][ T7088] bond1: (slave gretap1): making interface the new active one [ 166.802569][ T7088] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 166.811424][ T7089] syzkaller0: entered promiscuous mode [ 166.819984][ T7076] macvlan2: entered promiscuous mode [ 166.825557][ T7076] macvlan2: entered allmulticast mode [ 166.831720][ T7076] bond1: entered promiscuous mode [ 166.836778][ T7076] gretap1: entered promiscuous mode [ 166.849006][ T7076] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 166.863804][ T7076] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 166.875745][ T7076] bond1: left promiscuous mode [ 166.880592][ T7076] gretap1: left promiscuous mode [ 166.905660][ T7098] lo speed is unknown, defaulting to 1000 [ 166.926262][ T7098] wg1 speed is unknown, defaulting to 1000 [ 166.940160][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.944446][ T7103] __nla_validate_parse: 10 callbacks suppressed [ 166.944535][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.870'. [ 166.950392][ T7098] lo speed is unknown, defaulting to 1000 [ 167.019581][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 167.028585][ T7108] validate_nla: 2 callbacks suppressed [ 167.028599][ T7108] netlink: 'syz.4.872': attribute type 6 has an invalid length. [ 167.042279][ T7110] xt_connbytes: Forcing CT accounting to be enabled [ 167.048887][ T7110] Cannot find set identified by id 0 to match [ 167.056760][ T7105] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.871' sets config #1 [ 167.260321][ T7124] netlink: 'syz.0.875': attribute type 6 has an invalid length. [ 167.293963][ T7136] batman_adv: batadv0: Removing interface: gretap1 [ 167.310729][ T7123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.327765][ T7137] loop4: detected capacity change from 0 to 1024 [ 167.339400][ T7137] EXT4-fs: Mount option(s) incompatible with ext2 [ 167.420955][ T7152] loop0: detected capacity change from 0 to 512 [ 167.427600][ T7152] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.434317][ T7152] EXT4-fs: Ignoring removed bh option [ 167.441654][ T7152] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 167.457000][ T7152] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.882: corrupted inode contents [ 167.473095][ T7152] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #11: comm syz.0.882: mark_inode_dirty error [ 167.484961][ T7152] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.882: invalid indirect mapped block 1 (level 1) [ 167.498374][ T7152] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.882: corrupted inode contents [ 167.510906][ T7152] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 167.519613][ T7152] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.882: corrupted inode contents [ 167.531942][ T7152] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.882: mark_inode_dirty error [ 167.550837][ T7152] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 167.557671][ T7159] loop4: detected capacity change from 0 to 2048 [ 167.560741][ T7152] EXT4-fs (loop0): 1 truncate cleaned up [ 167.572333][ T7152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.587144][ T7152] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.882: path /195/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 167.608950][ T7159] loop4: p1 < > p4 [ 167.613536][ T7159] loop4: p4 size 8388608 extends beyond EOD, truncated [ 167.665636][ T7152] netlink: 'syz.0.882': attribute type 3 has an invalid length. [ 167.673589][ T7152] netlink: 'syz.0.882': attribute type 3 has an invalid length. [ 167.948117][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.885'. [ 168.087643][ T7183] bridge0: entered promiscuous mode [ 168.124691][ T29] kauditd_printk_skb: 2474 callbacks suppressed [ 168.124705][ T29] audit: type=1326 audit(424.017:62337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 168.153868][ T29] audit: type=1326 audit(424.017:62338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 168.176927][ T29] audit: type=1326 audit(424.017:62339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 168.199788][ T29] audit: type=1326 audit(424.017:62340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 168.222621][ T29] audit: type=1326 audit(424.017:62341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 168.245511][ T29] audit: type=1326 audit(424.017:62342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa1ae0ef703 code=0x7ffc0000 [ 168.268211][ T29] audit: type=1326 audit(424.057:62344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa1ae0ef787 code=0x7ffc0000 [ 168.290921][ T29] audit: type=1326 audit(424.057:62343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 168.313965][ T29] audit: type=1326 audit(424.057:62345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 168.336930][ T29] audit: type=1326 audit(424.057:62346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa1ae0a6b3d code=0x7ffc0000 [ 168.508557][ T7186] lo speed is unknown, defaulting to 1000 [ 168.515520][ T7186] wg1 speed is unknown, defaulting to 1000 [ 168.522543][ T7186] lo speed is unknown, defaulting to 1000 [ 168.988009][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.053338][ T7217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.886'. [ 169.062284][ T7217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.886'. [ 169.071164][ T7217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.886'. [ 169.080515][ T7217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.886'. [ 169.094073][ T7212] netlink: 'syz.3.889': attribute type 21 has an invalid length. [ 169.111965][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.888'. [ 169.136105][ T7212] xt_CT: No such helper "snmp_trap" [ 169.151075][ T7212] loop3: detected capacity change from 0 to 512 [ 169.203903][ T7222] netlink: 'syz.2.890': attribute type 3 has an invalid length. [ 169.220157][ T7222] netlink: 'syz.2.890': attribute type 3 has an invalid length. [ 169.231878][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 169.245493][ T7212] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 169.261692][ T7212] EXT4-fs (loop3): orphan cleanup on readonly fs [ 169.275535][ T7212] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.889: corrupted inode contents [ 169.287944][ T7212] EXT4-fs (loop3): Remounting filesystem read-only [ 169.295534][ T7212] EXT4-fs (loop3): 1 truncate cleaned up [ 169.301687][ T67] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 169.312285][ T67] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 169.322848][ T67] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 169.334128][ T7212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.358326][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.439309][ T7241] ip6gre3: entered promiscuous mode [ 169.444595][ T7241] ip6gre3: entered allmulticast mode [ 169.450611][ T67] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 169.453314][ T7241] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 169.458250][ T67] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 169.480511][ T3408] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 169.547734][ T7232] netlink: 96 bytes leftover after parsing attributes in process `syz.4.892'. [ 169.788150][ T7256] loop3: detected capacity change from 0 to 4096 [ 169.795028][ T7256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.800516][ T3408] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 169.811748][ T7256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.914634][ T7261] loop0: detected capacity change from 0 to 4096 [ 169.923718][ T7261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.099009][ T7267] netlink: 'syz.2.900': attribute type 3 has an invalid length. [ 170.107033][ T7267] netlink: 'syz.2.900': attribute type 3 has an invalid length. [ 170.199598][ T7271] lo speed is unknown, defaulting to 1000 [ 170.206083][ T7271] wg1 speed is unknown, defaulting to 1000 [ 170.212718][ T7271] lo speed is unknown, defaulting to 1000 [ 170.488986][ T3408] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 170.637145][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.845600][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.933508][ T3408] kernel read not supported for file /672/net/ip_vs (pid: 3408 comm: kworker/0:5) [ 170.968300][ T7319] ref_ctr_offset mismatch. inode: 0x459 offset: 0x0 ref_ctr_offset(old): 0x5c ref_ctr_offset(new): 0x0 [ 171.171543][ T7324] lo speed is unknown, defaulting to 1000 [ 171.178040][ T7324] wg1 speed is unknown, defaulting to 1000 [ 171.184566][ T7324] lo speed is unknown, defaulting to 1000 [ 171.553383][ T7348] loop4: detected capacity change from 0 to 512 [ 171.603544][ T7348] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 171.619942][ T7348] EXT4-fs (loop4): mount failed [ 171.818846][ T7366] siw: device registration error -23 [ 171.885904][ T7372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7372 comm=syz.2.912 [ 171.917467][ T7369] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 172.010780][ T7380] tipc: Enabled bearer , priority 0 [ 172.020075][ T7380] tipc: Disabling bearer [ 172.067222][ T7391] loop0: detected capacity change from 0 to 128 [ 172.117121][ T7391] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.235116][ T7391] __nla_validate_parse: 1 callbacks suppressed [ 172.235133][ T7391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.915'. [ 172.358085][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.522415][ T7415] siw: device registration error -23 [ 172.594409][ T7414] loop3: detected capacity change from 0 to 4096 [ 172.635653][ T7414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.879968][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 172.965332][ T7443] lo speed is unknown, defaulting to 1000 [ 172.971762][ T7443] wg1 speed is unknown, defaulting to 1000 [ 172.978413][ T7443] lo speed is unknown, defaulting to 1000 [ 173.274274][ T29] kauditd_printk_skb: 2350 callbacks suppressed [ 173.274295][ T29] audit: type=1400 audit(429.167:64690): avc: denied { allowed } for pid=7412 comm="syz.3.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 173.299339][ T29] audit: type=1400 audit(429.177:64691): avc: denied { create } for pid=7412 comm="syz.3.916" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 173.320008][ T29] audit: type=1400 audit(429.177:64692): avc: denied { map } for pid=7412 comm="syz.3.916" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 173.343664][ T29] audit: type=1400 audit(429.177:64693): avc: denied { read write } for pid=7412 comm="syz.3.916" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 173.384485][ T7439] netlink: 184 bytes leftover after parsing attributes in process `syz.0.919'. [ 173.472375][ T7467] loop0: detected capacity change from 0 to 512 [ 173.479192][ T7467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.485902][ T7467] EXT4-fs: Ignoring removed bh option [ 173.507456][ T29] audit: type=1400 audit(429.367:64694): avc: denied { write } for pid=7437 comm="syz.0.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 173.612782][ T29] audit: type=1400 audit(429.547:64695): avc: denied { create } for pid=7427 comm="syz.4.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.631767][ T29] audit: type=1400 audit(429.567:64696): avc: denied { setopt } for pid=7427 comm="syz.4.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.650902][ T29] audit: type=1400 audit(429.577:64697): avc: denied { write } for pid=7427 comm="syz.4.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.695875][ T7440] bridge0: port 1(erspan0) entered blocking state [ 173.702422][ T7440] bridge0: port 1(erspan0) entered disabled state [ 173.724037][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.730995][ T7440] erspan0: entered allmulticast mode [ 173.738415][ T7467] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 173.764577][ T7440] erspan0: entered promiscuous mode [ 173.778973][ T7467] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.920: corrupted inode contents [ 173.800647][ T7467] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #11: comm syz.0.920: mark_inode_dirty error [ 173.815382][ T29] audit: type=1400 audit(429.667:64698): avc: denied { read } for pid=7427 comm="syz.4.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.834194][ T29] audit: type=1400 audit(429.667:64699): avc: denied { create } for pid=7427 comm="syz.4.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.863733][ T7467] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.920: invalid indirect mapped block 1 (level 1) [ 173.880814][ T7467] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.920: corrupted inode contents [ 173.892992][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 173.905046][ T7467] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 173.958491][ T7467] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.920: corrupted inode contents [ 174.020780][ T7467] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.920: mark_inode_dirty error [ 174.077833][ T7475] netlink: 'syz.2.921': attribute type 3 has an invalid length. [ 174.080470][ T7467] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 174.091232][ T7475] netlink: 'syz.2.921': attribute type 3 has an invalid length. [ 174.140495][ T7467] EXT4-fs (loop0): 1 truncate cleaned up [ 174.146613][ T7467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.193293][ T7467] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.920: path /204/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 174.275453][ T7489] siw: device registration error -23 [ 174.339177][ T7467] netlink: 'syz.0.920': attribute type 3 has an invalid length. [ 174.339209][ T7467] netlink: 'syz.0.920': attribute type 3 has an invalid length. [ 174.387007][ T7491] loop4: detected capacity change from 0 to 4096 [ 174.397209][ T7491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.429872][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.453319][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.461981][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.503320][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.803143][ T7522] netlink: 14 bytes leftover after parsing attributes in process `syz.0.933'. [ 174.836168][ T7522] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 174.867177][ T7522] dummy0: left promiscuous mode [ 174.892034][ T7522] $Hÿ (unregistering): Released all slaves [ 175.045642][ T7560] tipc: New replicast peer: 255.255.255.255 [ 175.051984][ T7560] tipc: Enabled bearer , priority 10 [ 175.079131][ T7562] loop0: detected capacity change from 0 to 128 [ 175.094697][ T7562] EXT4-fs: Ignoring removed nobh option [ 175.114772][ T7562] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.296978][ T7571] netlink: 'syz.2.936': attribute type 1 has an invalid length. [ 175.304884][ T7571] netlink: 224 bytes leftover after parsing attributes in process `syz.2.936'. [ 175.315069][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.628657][ T7593] loop0: detected capacity change from 0 to 256 [ 175.635663][ T7593] vfat: Bad value for 'check' [ 176.605668][ T7607] lo speed is unknown, defaulting to 1000 [ 176.612739][ T7607] wg1 speed is unknown, defaulting to 1000 [ 176.618993][ T7607] lo speed is unknown, defaulting to 1000 [ 176.763362][ T7600] netlink: 'syz.2.940': attribute type 3 has an invalid length. [ 176.844351][ T7600] netlink: 'syz.2.940': attribute type 3 has an invalid length. [ 177.279404][ T7639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.301059][ T7616] netlink: 'syz.2.943': attribute type 3 has an invalid length. [ 177.308885][ T7639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.320654][ T7616] netlink: 'syz.2.943': attribute type 3 has an invalid length. [ 177.961811][ T7671] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 178.019740][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 178.164052][ T7669] loop3: detected capacity change from 0 to 8192 [ 178.225128][ T7669] loop3: p2 p3 p4 [ 178.230570][ T7669] loop3: p2 start 2936012800 is beyond EOD, truncated [ 178.237355][ T7669] loop3: p3 start 1912602624 is beyond EOD, truncated [ 178.244192][ T7669] loop3: p4 size 656640 extends beyond EOD, truncated [ 178.405071][ T29] kauditd_printk_skb: 4553 callbacks suppressed [ 178.405089][ T29] audit: type=1400 audit(442.378:69250): avc: denied { create } for pid=7684 comm="syz.4.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 178.433223][ T7687] loop3: detected capacity change from 0 to 512 [ 178.459079][ T29] audit: type=1326 audit(442.408:69251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 178.460674][ T7687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.482064][ T29] audit: type=1326 audit(442.408:69252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 178.488633][ T7687] EXT4-fs: Ignoring removed bh option [ 178.511529][ T29] audit: type=1326 audit(442.408:69253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 178.539543][ T29] audit: type=1326 audit(442.408:69254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 178.562541][ T29] audit: type=1326 audit(442.408:69255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 178.585479][ T29] audit: type=1326 audit(442.408:69256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 178.608397][ T29] audit: type=1326 audit(442.408:69257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 178.631314][ T29] audit: type=1326 audit(442.408:69258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 178.654285][ T29] audit: type=1326 audit(442.408:69259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa1ae0ef6c9 code=0x7ffc0000 [ 178.768626][ T7692] loop0: detected capacity change from 0 to 512 [ 178.782384][ T7692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.801136][ T7692] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.820909][ T7687] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 178.845786][ T7687] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.951: corrupted inode contents [ 178.935762][ T7701] lo speed is unknown, defaulting to 1000 [ 178.942131][ T7701] wg1 speed is unknown, defaulting to 1000 [ 178.948702][ T7701] lo speed is unknown, defaulting to 1000 [ 179.411313][ T7687] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #11: comm syz.3.951: mark_inode_dirty error [ 179.440486][ T7687] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.951: invalid indirect mapped block 1 (level 1) [ 179.472769][ T7687] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.951: corrupted inode contents [ 179.492513][ T7687] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 179.510853][ T7687] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.951: corrupted inode contents [ 179.544127][ T7687] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.951: mark_inode_dirty error [ 179.557614][ T7687] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 179.576767][ T7687] EXT4-fs (loop3): 1 truncate cleaned up [ 179.590856][ T7687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.621119][ T7687] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.951: path /181/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 179.853451][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.116601][ T7808] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.140025][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.195404][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.833486][ T7814] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 181.038732][ T7826] loop3: detected capacity change from 0 to 128 [ 181.070590][ T7826] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.105215][ T7829] netlink: 'syz.4.960': attribute type 6 has an invalid length. [ 181.106038][ T7822] loop0: detected capacity change from 0 to 8192 [ 181.140538][ T7822] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.152869][ T7826] netlink: 16 bytes leftover after parsing attributes in process `syz.3.962'. [ 181.189652][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.440270][ T7870] lo speed is unknown, defaulting to 1000 [ 181.446703][ T7870] wg1 speed is unknown, defaulting to 1000 [ 181.453473][ T7870] lo speed is unknown, defaulting to 1000 [ 182.008916][ T7902] loop4: detected capacity change from 0 to 32768 [ 182.051863][ T7902] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 182.062754][ T7902] loop4: p1 start 460800 is beyond EOD, truncated [ 182.069384][ T7902] loop4: p2 size 83886080 extends beyond EOD, truncated [ 182.093727][ T7902] loop4: p5 start 460800 is beyond EOD, truncated [ 182.100287][ T7902] loop4: p6 size 83886080 extends beyond EOD, truncated [ 182.145167][ T3408] IPVS: starting estimator thread 0... [ 182.166447][ T7908] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 182.236457][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.970'. [ 182.250527][ T7915] IPVS: using max 2784 ests per chain, 139200 per kthread [ 182.256224][ T7920] lo speed is unknown, defaulting to 1000 [ 182.257785][ T7924] xt_hashlimit: size too large, truncated to 1048576 [ 182.263979][ T7920] wg1 speed is unknown, defaulting to 1000 [ 182.276745][ T7920] lo speed is unknown, defaulting to 1000 [ 182.391284][ T7920] netlink: 'syz.1.970': attribute type 6 has an invalid length. [ 182.415552][ T7952] xt_policy: output policy not valid in PREROUTING and INPUT [ 182.430105][ T7919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.447190][ T7919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.737311][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.979'. [ 182.850492][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 182.936834][ T7979] pimreg: entered allmulticast mode [ 182.989154][ T7979] netlink: 'syz.0.980': attribute type 22 has an invalid length. [ 182.997008][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.980'. [ 183.117303][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'. [ 183.410602][ T29] kauditd_printk_skb: 5177 callbacks suppressed [ 183.410621][ T29] audit: type=1326 audit(447.378:74437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f436e5a6567 code=0x7ffc0000 [ 183.439755][ T29] audit: type=1326 audit(447.378:74438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0942c46567 code=0x7ffc0000 [ 183.462991][ T29] audit: type=1326 audit(447.378:74439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f436e54b789 code=0x7ffc0000 [ 183.485879][ T29] audit: type=1326 audit(447.378:74440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f436e5a6567 code=0x7ffc0000 [ 183.508621][ T29] audit: type=1326 audit(447.378:74441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f436e54b789 code=0x7ffc0000 [ 183.531484][ T29] audit: type=1326 audit(447.378:74442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0942beb789 code=0x7ffc0000 [ 183.554204][ T29] audit: type=1326 audit(447.378:74444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f436e5a6567 code=0x7ffc0000 [ 183.576977][ T29] audit: type=1326 audit(447.378:74443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0942c46567 code=0x7ffc0000 [ 183.599698][ T29] audit: type=1326 audit(447.378:74445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.3.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f436e54b789 code=0x7ffc0000 [ 183.622456][ T29] audit: type=1326 audit(447.378:74446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0942beb789 code=0x7ffc0000 [ 183.662996][ T7992] loop4: detected capacity change from 0 to 128 [ 183.674970][ T7992] bio_check_eod: 16 callbacks suppressed [ 183.674987][ T7992] syz.4.983: attempt to access beyond end of device [ 183.674987][ T7992] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 183.695657][ T7992] syz.4.983: attempt to access beyond end of device [ 183.695657][ T7992] loop4: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 183.715669][ T7992] syz.4.983: attempt to access beyond end of device [ 183.715669][ T7992] loop4: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 183.729043][ T7992] buffer_io_error: 2 callbacks suppressed [ 183.729059][ T7992] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 183.809101][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.983'. [ 183.862679][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.983'. [ 183.897118][ T7978] pimreg: left allmulticast mode [ 183.908163][ T7992] syz.4.983: attempt to access beyond end of device [ 183.908163][ T7992] loop4: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 183.949779][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.983'. [ 183.988116][ T7992] syz.4.983: attempt to access beyond end of device [ 183.988116][ T7992] loop4: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 184.001488][ T7992] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 184.026802][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.983'. [ 184.066973][ T7992] syz.4.983: attempt to access beyond end of device [ 184.066973][ T7992] loop4: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 184.090091][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.983'. [ 184.113546][ T7992] syz.4.983: attempt to access beyond end of device [ 184.113546][ T7992] loop4: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 184.126898][ T7992] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 184.139860][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.983'. [ 184.168932][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.984'. [ 184.185821][ T7992] syz.4.983: attempt to access beyond end of device [ 184.185821][ T7992] loop4: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 184.274249][ T7992] syz.4.983: attempt to access beyond end of device [ 184.274249][ T7992] loop4: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 184.287643][ T7992] Buffer I/O error on dev loop4, logical block 104, lost async page write [ 184.383214][ T7992] syz.4.983: attempt to access beyond end of device [ 184.383214][ T7992] loop4: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 184.432764][ T8014] loop0: detected capacity change from 0 to 2048 [ 184.447281][ T7992] Buffer I/O error on dev loop4, logical block 108, lost async page write [ 184.473806][ T7992] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 184.501221][ T8014] loop0: p1 < > p4 [ 184.513191][ T8014] loop0: p4 size 8388608 extends beyond EOD, truncated [ 184.586280][ T8017] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8017 comm=syz.1.988 [ 184.723570][ T8045] loop0: detected capacity change from 0 to 512 [ 184.763047][ T8045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.769704][ T8045] EXT4-fs: Ignoring removed bh option [ 184.803292][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.991'. [ 184.812728][ T8045] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 184.863033][ T8045] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.992: corrupted inode contents [ 184.880012][ T8050] can0: slcan on ttyS3. [ 184.910120][ T8045] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #11: comm syz.0.992: mark_inode_dirty error [ 184.927724][ T8045] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.992: invalid indirect mapped block 1 (level 1) [ 184.944053][ T8045] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.992: corrupted inode contents [ 184.956388][ T8045] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 184.965195][ T8045] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.992: corrupted inode contents [ 184.966409][ T8042] bridge0: port 1(erspan0) entered blocking state [ 184.977377][ T8045] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.992: mark_inode_dirty error [ 184.983692][ T8042] bridge0: port 1(erspan0) entered disabled state [ 185.015879][ T8045] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 185.025141][ T8045] EXT4-fs (loop0): 1 truncate cleaned up [ 185.031535][ T8045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.050610][ T8059] loop4: detected capacity change from 0 to 512 [ 185.058615][ T8057] loop3: detected capacity change from 0 to 164 [ 185.066243][ T8042] erspan0: entered promiscuous mode [ 185.072573][ T8045] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.992: path /217/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 185.094820][ T8059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.101549][ T8059] EXT4-fs: Ignoring removed bh option [ 185.117753][ T8059] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 185.150490][ T8059] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.995: corrupted inode contents [ 185.170598][ T8059] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.995: mark_inode_dirty error [ 185.200686][ T8059] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.995: invalid indirect mapped block 1 (level 1) [ 185.214174][ T8059] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.995: corrupted inode contents [ 185.224182][ T8048] can0 (unregistered): slcan off ttyS3. [ 185.226343][ T8059] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 185.250552][ T8059] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.995: corrupted inode contents [ 185.270856][ T8059] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.995: mark_inode_dirty error [ 185.284670][ T8045] netlink: 'syz.0.992': attribute type 3 has an invalid length. [ 185.294327][ T8059] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 185.300584][ T8045] netlink: 'syz.0.992': attribute type 3 has an invalid length. [ 185.320157][ T8059] EXT4-fs (loop4): 1 truncate cleaned up [ 185.345290][ T8059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.385164][ T8059] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.995: path /196/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 185.553997][ T8057] netlink: 'syz.3.994': attribute type 13 has an invalid length. [ 185.564875][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.576760][ T8057] gretap0: refused to change device tx_queue_len [ 185.595470][ T8057] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 185.611657][ T8059] netlink: 'syz.4.995': attribute type 3 has an invalid length. [ 185.619324][ T8059] netlink: 'syz.4.995': attribute type 3 has an invalid length. [ 185.724950][ T8087] loop0: detected capacity change from 0 to 512 [ 185.749254][ T8087] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.756042][ T8087] EXT4-fs: Ignoring removed bh option [ 185.763751][ T8095] loop3: detected capacity change from 0 to 128 [ 185.774127][ T8087] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 185.789409][ T8087] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.1009: corrupted inode contents [ 185.823942][ T8087] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #11: comm syz.0.1009: mark_inode_dirty error [ 185.827035][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1002'. [ 185.844956][ T8087] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1009: invalid indirect mapped block 1 (level 1) [ 185.859623][ T8087] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.1009: corrupted inode contents [ 185.863429][ T8100] syzkaller0: entered promiscuous mode [ 185.877002][ T8100] syzkaller0: entered allmulticast mode [ 185.900515][ T8087] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 185.909978][ T8087] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.1009: corrupted inode contents [ 185.923243][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.944000][ T8087] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.1009: mark_inode_dirty error [ 185.959639][ T8087] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 185.969516][ T8087] EXT4-fs (loop0): 1 truncate cleaned up [ 185.976058][ T8087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.992201][ T8087] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.1009: path /218/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 186.159330][ T8087] netlink: 'syz.0.1009': attribute type 3 has an invalid length. [ 186.174955][ T8087] netlink: 'syz.0.1009': attribute type 3 has an invalid length. [ 186.580004][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.661245][ T8139] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 187.171479][ T8160] ip6gre1: entered promiscuous mode [ 187.176743][ T8160] ip6gre1: entered allmulticast mode [ 187.219704][ T8156] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.259750][ T8169] loop0: detected capacity change from 0 to 164 [ 187.462687][ T8173] lo speed is unknown, defaulting to 1000 [ 187.469120][ T8173] wg1 speed is unknown, defaulting to 1000 [ 187.475557][ T8173] lo speed is unknown, defaulting to 1000 [ 187.590904][ T8174] lo speed is unknown, defaulting to 1000 [ 187.597685][ T8174] wg1 speed is unknown, defaulting to 1000 [ 187.604307][ T8174] lo speed is unknown, defaulting to 1000 [ 188.350540][ T7772] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.358155][ T7772] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.380512][ T4676] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.259578][ T8222] loop4: detected capacity change from 0 to 512 [ 189.286690][ T8222] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.293387][ T8222] EXT4-fs: Ignoring removed bh option [ 189.300766][ T29] kauditd_printk_skb: 5017 callbacks suppressed [ 189.300783][ T29] audit: type=1400 audit(453.218:79446): avc: denied { create } for pid=8221 comm="syz.4.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.326993][ T29] audit: type=1400 audit(453.218:79447): avc: denied { read } for pid=8221 comm="syz.4.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.338723][ T4676] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.346745][ T29] audit: type=1400 audit(453.218:79448): avc: denied { read } for pid=8221 comm="syz.4.1015" dev="nsfs" ino=4026532795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 189.354268][ T4676] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.382365][ T29] audit: type=1400 audit(453.218:79449): avc: denied { open } for pid=8221 comm="syz.4.1015" path="net:[4026532795]" dev="nsfs" ino=4026532795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 189.561256][ T8222] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 189.589978][ T8222] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.1015: corrupted inode contents [ 189.602643][ T8222] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.1015: mark_inode_dirty error [ 189.615553][ T8222] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1015: invalid indirect mapped block 1 (level 1) [ 189.667703][ T29] audit: type=1326 audit(453.598:79450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0942c4f6c9 code=0x7ffc0000 [ 189.690506][ T8222] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.1015: corrupted inode contents [ 189.690634][ T29] audit: type=1326 audit(453.598:79451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0942c4f6c9 code=0x7ffc0000 [ 189.702903][ T8222] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 189.725377][ T29] audit: type=1326 audit(453.598:79452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0942c4f6c9 code=0x7ffc0000 [ 189.725409][ T29] audit: type=1326 audit(453.598:79453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0942c4f6c9 code=0x7ffc0000 [ 189.725435][ T29] audit: type=1326 audit(453.598:79454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0942c4f6c9 code=0x7ffc0000 [ 189.762900][ T8234] netlink: 'syz.0.1013': attribute type 13 has an invalid length. [ 189.779799][ T29] audit: type=1326 audit(453.598:79455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0942c4f6c9 code=0x7ffc0000 [ 189.803454][ T8222] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.1015: corrupted inode contents [ 189.819295][ T8232] __nla_validate_parse: 7 callbacks suppressed [ 189.819310][ T8232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1016'. [ 189.897517][ T8222] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.1015: mark_inode_dirty error [ 189.909221][ T8222] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 189.918417][ T8222] EXT4-fs (loop4): 1 truncate cleaned up [ 189.926130][ T8222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.929421][ T8235] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43 sclass=netlink_tcpdiag_socket pid=8235 comm=syz.2.1016 [ 189.947706][ T8222] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.1015: path /198/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 189.983938][ T8234] gretap0: refused to change device tx_queue_len [ 189.990688][ T8234] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 190.006808][ T8232] IPVS: Error connecting to the multicast addr [ 190.088779][ T8222] netlink: 'syz.4.1015': attribute type 3 has an invalid length. [ 190.096785][ T8222] netlink: 'syz.4.1015': attribute type 3 has an invalid length. [ 190.285258][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.555519][ T8244] siw: device registration error -23 [ 190.655367][ T8252] tipc: Bearer : already 2 bearers with priority 10 [ 190.663014][ T8252] tipc: Bearer : trying with adjusted priority [ 190.670065][ T8252] tipc: Enabling of bearer rejected, failed to enable media [ 190.831043][ T8278] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1024'. [ 191.049719][ T8295] loop4: detected capacity change from 0 to 256 [ 191.056577][ T8295] vfat: Unknown parameter ' ' [ 191.065642][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 191.378527][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1028'. [ 192.370489][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.398012][ T8313] loop3: detected capacity change from 0 to 128 [ 192.405206][ T8313] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 192.417676][ T8313] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 192.433218][ T8313] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8313 comm=syz.3.1031 [ 192.445749][ T8313] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8313 comm=syz.3.1031 [ 192.509368][ T7767] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 192.554955][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1032'. [ 192.604101][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1032'. [ 193.036512][ T8352] siw: device registration error -23 [ 193.088088][ T8322] netlink: 'syz.1.1033': attribute type 13 has an invalid length. [ 193.120625][ T8322] gretap0: refused to change device tx_queue_len [ 193.165518][ T8322] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 193.189335][ T8355] xt_hashlimit: size too large, truncated to 1048576 [ 193.373084][ T8358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 193.456253][ T8361] loop4: detected capacity change from 0 to 2048 [ 193.492782][ T8361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.501210][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1040'. [ 193.534554][ T8365] lo speed is unknown, defaulting to 1000 [ 193.541450][ T8365] wg1 speed is unknown, defaulting to 1000 [ 193.547593][ T8365] lo speed is unknown, defaulting to 1000 [ 193.608300][ T8386] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1041'. [ 193.642908][ T8394] netlink: 'syz.0.1040': attribute type 6 has an invalid length. [ 193.652954][ T8388] lo speed is unknown, defaulting to 1000 [ 193.667715][ T8388] wg1 speed is unknown, defaulting to 1000 [ 193.675194][ T8388] lo speed is unknown, defaulting to 1000 [ 194.310910][ T29] kauditd_printk_skb: 1481 callbacks suppressed [ 194.310928][ T29] audit: type=1326 audit(458.288:80937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8405 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0942c46567 code=0x7ffc0000 [ 194.335481][ T8436] loop0: detected capacity change from 0 to 512 [ 194.391762][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.417875][ T29] audit: type=1326 audit(458.288:80938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f436e5a6567 code=0x7ffc0000 [ 194.440777][ T29] audit: type=1326 audit(458.288:80939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f436e54b789 code=0x7ffc0000 [ 194.463656][ T29] audit: type=1326 audit(458.288:80940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f436e5af6c9 code=0x7ffc0000 [ 194.486533][ T29] audit: type=1326 audit(458.298:80941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 194.509453][ T29] audit: type=1326 audit(458.298:80942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 194.532417][ T29] audit: type=1326 audit(458.298:80943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 194.555437][ T29] audit: type=1326 audit(458.298:80944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 194.578346][ T29] audit: type=1326 audit(458.298:80945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 194.601243][ T29] audit: type=1326 audit(458.298:80946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 194.669125][ T8446] loop3: detected capacity change from 0 to 512 [ 194.681145][ T8436] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1044: error while reading EA inode 32 err=-116 [ 194.715021][ T8436] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1044: error while reading EA inode 32 err=-116 [ 194.728744][ T8436] EXT4-fs (loop0): 1 orphan inode deleted [ 194.734650][ T8446] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1047: couldn't read orphan inode 26 (err -116) [ 194.747159][ T8446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.760154][ T8436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.830797][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.876086][ T8446] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #13: comm syz.3.1047: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 194.968697][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.122558][ T8472] loop3: detected capacity change from 0 to 256 [ 195.129536][ T8472] vfat: Unknown parameter ' ' [ 195.139217][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1049'. [ 195.212862][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1052'. [ 195.225955][ T8480] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1052'. [ 196.061822][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 196.091975][ T8489] block device autoloading is deprecated and will be removed. [ 196.353326][ T8486] netlink: 'syz.1.1053': attribute type 13 has an invalid length. [ 196.445841][ T8500] loop0: detected capacity change from 0 to 1024 [ 196.456622][ T8486] gretap0: refused to change device tx_queue_len [ 196.464493][ T8500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.490208][ T8486] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 197.139252][ T8520] loop3: detected capacity change from 0 to 512 [ 197.254326][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.308670][ T8539] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1066'. [ 197.326275][ T8539] lo speed is unknown, defaulting to 1000 [ 197.336658][ T8539] wg1 speed is unknown, defaulting to 1000 [ 197.343260][ T8539] lo speed is unknown, defaulting to 1000 [ 197.356670][ T8543] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8543 comm=syz.0.1064 [ 197.381098][ T8545] netlink: 'syz.2.1066': attribute type 13 has an invalid length. [ 197.474534][ T4675] lo speed is unknown, defaulting to 1000 [ 197.480281][ T4675] syz2: Port: 1 Link DOWN [ 197.491733][ T8557] 9pnet_fd: Insufficient options for proto=fd [ 197.504854][ T8557] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1067'. [ 197.675423][ T8576] siw: device registration error -23 [ 197.701184][ T8580] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1070'. [ 197.755734][ T8580] loop4: detected capacity change from 0 to 512 [ 197.783014][ T8581] lo speed is unknown, defaulting to 1000 [ 197.789426][ T8581] wg1 speed is unknown, defaulting to 1000 [ 197.796036][ T8581] lo speed is unknown, defaulting to 1000 [ 198.042314][ T8580] EXT4-fs (loop4): orphan cleanup on readonly fs [ 198.067981][ T8580] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1070: bad orphan inode 13 [ 198.140432][ T8580] ext4_test_bit(bit=12, block=18) = 1 [ 198.145857][ T8580] is_bad_inode(inode)=0 [ 198.150015][ T8580] NEXT_ORPHAN(inode)=2130706432 [ 198.154904][ T8580] max_ino=32 [ 198.158116][ T8580] i_nlink=1 [ 198.171532][ T8580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.189974][ T8580] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 198.212638][ T8580] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1070: bg 0: block 248: padding at end of block bitmap is not set [ 198.230796][ T8580] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1070: Failed to acquire dquot type 1 [ 198.257929][ T8580] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 198.260084][ T8612] lo speed is unknown, defaulting to 1000 [ 198.288259][ T8612] wg1 speed is unknown, defaulting to 1000 [ 198.296103][ T8612] lo speed is unknown, defaulting to 1000 [ 198.317678][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.377853][ T8630] loop4: detected capacity change from 0 to 512 [ 198.384886][ T8628] loop3: detected capacity change from 0 to 1024 [ 198.405710][ T8630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.405743][ T8628] EXT4-fs: inline encryption not supported [ 198.412383][ T8630] EXT4-fs: Ignoring removed bh option [ 198.418215][ T8628] EXT4-fs: Ignoring removed orlov option [ 198.476975][ T8628] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 198.498813][ T8630] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 198.530975][ T8628] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 198.540679][ T8628] System zones: 0-1, 3-12 [ 198.549750][ T8628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.579313][ T8630] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.1074: corrupted inode contents [ 198.660998][ T8630] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.1074: mark_inode_dirty error [ 198.683018][ T8630] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1074: invalid indirect mapped block 1 (level 1) [ 198.738199][ T8630] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.1074: corrupted inode contents [ 198.782192][ T8630] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 198.830582][ T8630] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.1074: corrupted inode contents [ 198.873153][ T8630] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.1074: mark_inode_dirty error [ 198.920812][ T8630] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 198.928080][ T8661] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 198.942039][ T8661] EXT4-fs (loop3): This should not happen!! Data will be lost [ 198.942039][ T8661] [ 198.951717][ T8661] EXT4-fs (loop3): Total free blocks count 0 [ 198.957716][ T8661] EXT4-fs (loop3): Free/Dirty block details [ 198.963656][ T8661] EXT4-fs (loop3): free_blocks=0 [ 198.968608][ T8661] EXT4-fs (loop3): dirty_blocks=0 [ 198.973659][ T8661] EXT4-fs (loop3): Block reservation details [ 198.979755][ T8661] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 199.020566][ T8630] EXT4-fs (loop4): 1 truncate cleaned up [ 199.038145][ T8630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.121457][ T8630] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.1074: path /211/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 199.171240][ T8665] loop0: detected capacity change from 0 to 764 [ 199.180621][ T8665] iso9660: Unknown parameter '0177777777777777777777718446744073709551615ÿ' [ 199.250946][ T8678] tipc: Enabled bearer , priority 0 [ 199.282965][ T8678] tipc: Disabling bearer [ 199.290301][ T8630] netlink: 'syz.4.1074': attribute type 3 has an invalid length. [ 199.300527][ T8630] netlink: 'syz.4.1074': attribute type 3 has an invalid length. [ 199.326802][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'. [ 199.335925][ T8688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.346336][ T8688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.384590][ T29] kauditd_printk_skb: 3603 callbacks suppressed [ 199.384606][ T29] audit: type=1326 audit(463.358:84548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 199.416031][ T29] audit: type=1326 audit(463.398:84549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 199.438952][ T29] audit: type=1326 audit(463.398:84550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 199.461930][ T29] audit: type=1326 audit(463.398:84551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 199.487431][ T29] audit: type=1326 audit(463.468:84552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 199.510882][ T29] audit: type=1326 audit(463.468:84553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 199.520510][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 199.534218][ T29] audit: type=1326 audit(463.468:84554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 199.581276][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.598339][ T29] audit: type=1326 audit(463.568:84555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 199.621192][ T29] audit: type=1326 audit(463.568:84556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 199.644143][ T29] audit: type=1326 audit(463.568:84557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e850f6c9 code=0x7ffc0000 [ 199.727733][ T8715] xt_hashlimit: size too large, truncated to 1048576 [ 199.852460][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 199.892727][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.178668][ T8757] netlink: 'syz.1.1090': attribute type 3 has an invalid length. [ 200.190503][ T8757] netlink: 'syz.1.1090': attribute type 3 has an invalid length. [ 200.223288][ T8770] loop3: detected capacity change from 0 to 1024 [ 200.230692][ T8770] EXT4-fs: inline encryption not supported [ 200.236573][ T8770] EXT4-fs: Ignoring removed orlov option [ 200.245413][ T8770] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 200.266979][ T8770] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 200.289982][ T8770] System zones: 0-1, 3-12 [ 200.300982][ T8770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.327374][ T8779] tipc: Enabled bearer , priority 0 [ 200.342499][ T8779] tipc: Disabling bearer [ 200.361270][ T8787] loop4: detected capacity change from 0 to 1024 [ 200.372488][ T8787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 200.425632][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 200.475333][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 200.484469][ T8798] erspan0: left allmulticast mode [ 200.489571][ T8798] erspan0: left promiscuous mode [ 200.494751][ T8798] bridge0: port 1(erspan0) entered disabled state [ 200.633891][ T8806] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 200.646414][ T8806] EXT4-fs (loop3): This should not happen!! Data will be lost [ 200.646414][ T8806] [ 200.656221][ T8806] EXT4-fs (loop3): Total free blocks count 0 [ 200.662243][ T8806] EXT4-fs (loop3): Free/Dirty block details [ 200.668152][ T8806] EXT4-fs (loop3): free_blocks=0 [ 200.673215][ T8806] EXT4-fs (loop3): dirty_blocks=0 [ 200.678248][ T8806] EXT4-fs (loop3): Block reservation details [ 200.684435][ T8806] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 200.770475][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 201.017092][ T8816] lo speed is unknown, defaulting to 1000 [ 201.023623][ T8816] wg1 speed is unknown, defaulting to 1000 [ 201.029943][ T8816] lo speed is unknown, defaulting to 1000 [ 201.350632][ T8842] xt_hashlimit: size too large, truncated to 1048576 [ 201.652911][ T8865] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1101'. [ 201.661973][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 201.685880][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 201.720584][ T8865] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1101'. [ 201.730664][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 201.848510][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1104'. [ 201.921907][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 201.983933][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'. [ 202.011584][ T8879] wg2: left allmulticast mode [ 202.034133][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.050223][ T8891] loop4: detected capacity change from 0 to 1024 [ 202.064085][ T8891] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 202.075262][ T8891] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 202.083421][ T8891] EXT4-fs (loop4): orphan cleanup on readonly fs [ 202.090782][ T8891] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.1107: Invalid inode table block 0 in block_group 0 [ 202.103711][ T8891] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 202.113294][ T8891] EXT4-fs error (device loop4): ext4_quota_write:7334: inode #3: comm syz.4.1107: mark_inode_dirty error [ 202.126386][ T8891] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1107: Failed to acquire dquot type 0 [ 202.137973][ T8891] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.1107: Invalid inode table block 0 in block_group 0 [ 202.152473][ T8891] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 202.166867][ T8891] EXT4-fs error (device loop4): ext4_ext_truncate:4475: inode #15: comm syz.4.1107: mark_inode_dirty error [ 202.185915][ T8909] loop0: detected capacity change from 0 to 1024 [ 202.188815][ T8891] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.1107: Invalid inode table block 0 in block_group 0 [ 202.205631][ T8909] EXT4-fs: Ignoring removed orlov option [ 202.209695][ T8891] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 202.224455][ T8891] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 202.239788][ T8909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.257355][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1110'. [ 202.267742][ T8891] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.1107: Invalid inode table block 0 in block_group 0 [ 202.297112][ T8891] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 202.307258][ T8891] EXT4-fs error (device loop4): ext4_truncate:4637: inode #15: comm syz.4.1107: mark_inode_dirty error [ 202.331013][ T8891] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 202.350368][ T8891] EXT4-fs (loop4): 1 truncate cleaned up [ 202.356623][ T8891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.399467][ T8922] IPv6: Can't replace route, no match found [ 202.429820][ T8921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.502083][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.690677][ T3408] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.747817][ T8928] netlink: 'syz.1.1113': attribute type 3 has an invalid length. [ 202.770308][ T8928] netlink: 'syz.1.1113': attribute type 3 has an invalid length. [ 202.957181][ T8917] ================================================================== [ 202.965332][ T8917] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 202.972559][ T8917] [ 202.974902][ T8917] write to 0xffff88811a49b254 of 4 bytes by task 8909 on cpu 0: [ 202.982548][ T8917] __xa_set_mark+0x172/0x1a0 [ 202.987155][ T8917] __folio_mark_dirty+0x384/0x4a0 [ 202.992207][ T8917] mark_buffer_dirty+0x11e/0x210 [ 202.997167][ T8917] block_write_end+0x12d/0x210 [ 203.001950][ T8917] ext4_write_end+0x134/0x730 [ 203.006662][ T8917] generic_perform_write+0x312/0x490 [ 203.011955][ T8917] ext4_buffered_write_iter+0x1ee/0x3c0 [ 203.017512][ T8917] ext4_file_write_iter+0x387/0xf60 [ 203.022720][ T8917] iter_file_splice_write+0x666/0xa60 [ 203.028097][ T8917] direct_splice_actor+0x156/0x2a0 [ 203.033210][ T8917] splice_direct_to_actor+0x312/0x680 [ 203.038583][ T8917] do_splice_direct+0xda/0x150 [ 203.043345][ T8917] do_sendfile+0x380/0x650 [ 203.047772][ T8917] __x64_sys_sendfile64+0x105/0x150 [ 203.052986][ T8917] x64_sys_call+0x2bb4/0x3000 [ 203.057669][ T8917] do_syscall_64+0xd2/0x200 [ 203.062172][ T8917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.068069][ T8917] [ 203.070390][ T8917] read to 0xffff88811a49b254 of 4 bytes by task 8917 on cpu 1: [ 203.077936][ T8917] xas_find_marked+0x5dc/0x620 [ 203.082707][ T8917] find_get_entry+0x5d/0x380 [ 203.087318][ T8917] filemap_get_folios_tag+0x92/0x210 [ 203.092611][ T8917] file_write_and_wait_range+0x1ea/0x2c0 [ 203.098248][ T8917] generic_buffers_fsync_noflush+0x45/0x120 [ 203.104160][ T8917] ext4_sync_file+0x1ab/0x690 [ 203.108840][ T8917] vfs_fsync_range+0x10d/0x130 [ 203.113610][ T8917] ext4_buffered_write_iter+0x34f/0x3c0 [ 203.119155][ T8917] ext4_file_write_iter+0x387/0xf60 [ 203.124352][ T8917] iter_file_splice_write+0x666/0xa60 [ 203.129725][ T8917] direct_splice_actor+0x156/0x2a0 [ 203.134836][ T8917] splice_direct_to_actor+0x312/0x680 [ 203.140210][ T8917] do_splice_direct+0xda/0x150 [ 203.144984][ T8917] do_sendfile+0x380/0x650 [ 203.149423][ T8917] __x64_sys_sendfile64+0x105/0x150 [ 203.154643][ T8917] x64_sys_call+0x2bb4/0x3000 [ 203.159333][ T8917] do_syscall_64+0xd2/0x200 [ 203.163843][ T8917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.169743][ T8917] [ 203.172071][ T8917] value changed: 0x00000021 -> 0x0a000021 [ 203.177785][ T8917] [ 203.180110][ T8917] Reported by Kernel Concurrency Sanitizer on: [ 203.186264][ T8917] CPU: 1 UID: 0 PID: 8917 Comm: syz.0.1109 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 203.197550][ T8917] Tainted: [W]=WARN [ 203.201352][ T8917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 203.211405][ T8917] ================================================================== [ 203.581879][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.