last executing test programs: 6m59.164273s ago: executing program 32 (id=2060): r0 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_FILTER={0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x100}]}, 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x44880) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, r7, 0x705, 0x3fdfff, 0x4, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x2c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r9, 0x0, 0x7fff}, 0x18) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0x14, 0x0, 0x7, 0xa, 0x0, 0x70bd29, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x6e6bbd, 0x1, {0x6, 0x6c, 0x0, 0x9, 0x0, 0xfffffff7, 0x0, @in=@multicast2, @in6=@empty}}]}, 0x50}}, 0x4040080) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r11, r12, 0x7, 0x0, @val=@tcx={@void, @value=r11}}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)={0x1f0, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9c0}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x722e}]}, @CTA_TUPLE_REPLY={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfea}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40d}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffbff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1551}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6b3}]}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x48800}, 0x4) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) 6m4.425300278s ago: executing program 33 (id=2840): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = eventfd(0x0) read$eventfd(r2, &(0x7f0000000240), 0x8) timer_settime(0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x24}, 0x0, 0x10000, 0xffffff81, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2000000e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601020060000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400020000008001240fffffffa0d000300686173683a6e657400000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000001100)="050000005ec3de3d", 0x8}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = socket(0x2b, 0x1, 0x0) bind$unix(r4, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002073696d3000000000000000000000000000000076"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4m28.182002978s ago: executing program 34 (id=4426): syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = fsopen(&(0x7f0000000600)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x80) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff92, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001480)={0xfc, {"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", 0xffffffffffffffb2}}, 0x1039) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r5, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) copy_file_range(r8, 0x0, r7, 0x0, 0xffffffffa003e459, 0x700000000000000) 4m6.804999614s ago: executing program 35 (id=4713): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ENABLE_SE(r1, 0x0, 0x20000010) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 4m4.490472854s ago: executing program 5 (id=4735): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x70d8755f0fda286e}, 0x2000, 0x200000000000000, 0x0, 0x4, 0x0, 0x40e}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu~=0||!') ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000080)={0x3}) 4m4.269858053s ago: executing program 5 (id=4738): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x11c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4800}, 0x400c010) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r3}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) socket(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz8FpAlEUBdA7n/mZCQSyTxFTRxaBrLJOE/bhypUd2I7FiIJ8YRwtQV2cs3k8ePfBDc9VcmqttXLb345J9zVmSsm2Jqm/U9Jm6Yd7bH+dbTinbuqSTbKu+U/qe5KPJN3PMCar75Skn48+D+Pyo8vf7qFdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBFXQIAAP//s1YVKg==") pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x8000000000000003}, 0x18) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000001100)={0xffffffffffffffff, 0x0, 0x9, r8, 0xa15}, 0xc) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000001080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}], [{@appraise_type}]}}) 4m3.807691263s ago: executing program 5 (id=4743): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') read$nci(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r8, 0x35, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0xb, 0x0, 0xffffffffffffffff, @void, @value, @void, @void, r9}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB="0d00000018000000", @ANYBLOB, @ANYRES32=r7, @ANYBLOB, @ANYRES64=r9], 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x31, 0x0, @val=@tcx={@void, @value=r3, @void, @void, r9}}, 0x1c) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 4m3.677646779s ago: executing program 5 (id=4747): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@barrier}, {@noblock_validity}, {@mblk_io_submit}, {@data_err_ignore}, {@errors_remount}, {@inlinecrypt}]}, 0x6, 0x615, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZp0uZ90768ii2KAQ8tSNOkFqtebOvBHgoW7EHEQ0OT1NDtD5oUbC2YggcFBRGvIr34D3iX4tWbCOrNs1BFKgoqXZnd2XST7CZrmt1NMp8PbHaeZ2b3eb47efI8M5NnJ4DCGs1+pBF7I+6fTSJGGtYNR23laL7dvV8r+ZpK5dVfkkiqeTfP1bdP8uddeWIwIr45EfG/0spy567fuDBZrtS8E3Fo/uKVQ3PXbxycvTh5fvr89KWJw88dOTr+/MSRiQ2Jc1f+fPLUK49/+O6bz858Wz6YxLE40//2VCyLY6OMxmjcz0NszO+LiKPZQpPPZavZBiEUWin/feyPiEdjJErVVM1IzH7Q08oBHVUpZb15Wwbb3RDYKpJ1NusdG10RoMvq44Ds+Lf+WHvUcKbDo5LuuXu8dgC0Mv6+2rmRGKweG+28lzQcGdXObezegPKzMv6+ue/T7BFLzkP8sbh3+jagnFYWbkXEY83iT6p1212NNIs/XVKPJCLGI2Igr99LD1GHpGG5E+dhVrPe+NOIOJY/Z/kn1ln+6LJ0t+MHoJjuHM878oUstdj/fRWLfVO9/1s6/hlu0netR6/7v9bjv3p/P1g9R54uG4dlY5bTzd+yf3nGj++f/LhV+Y3jv+yRlV8fC3bD3VsR+5bF/14WbD7+yeJPmuz/bJOzx9or4+Xvfj7Zal2v46/cjtjf9Pjnwag0W1rl+uShmdny9HjtZ9Myvvz6jc9bld/r+LP9v7NF/A37P13+uuwzudJmGV+cvn2x1brhNeNPfxpIasebA3nOW5Pz81cnIgaSU/kmDfmHV69LfZv6e2TxH3iqeftf8vt/a+n7DNX/ZLbhymsX7rVat57933Ax+X6lzTq0ksU/tfb+X9H+s7yP2izj99evPdFq3WrxDz1MYAAAAAAAAFBAafUabJKOLS6n6dhYbb7s/2NnWr48N//0zOVrl6YiDlT/H7I/rV/pHqmlkyw9kf8/bD19eFn6mYjYExGflIaq6bFzl8tTvQ4eAAAAAAAAAAAAAAAAAAAANold+fz/+n2qfyvV5v8DBdHJG8wBm5v2D8VVbf8rbvEEFIH+H4pL+4fi0v6huLR/KC7tH4pL+4fi0v6huLR/AAAAANiW9jx554ckIhZeGKo+MgP5OjOCYHvr73UFgJ4p9boCQM8sXvo32IfCaWv8/2f+5YCdrw7QA0mzzOrgoLJ647/T9JUAAAAAAAAAAAAAQAfs39t6/r+5wbC9mfYHxfUQ8/99dQBscb76H4rLMT6w1iz+wVYrzP8HAAAAAAAAAAAAgK4Zrj6SdCyfCzwcaTo2FvGfiNgd/cnMbHl6PCL+GxHfl/p3ZOmJXlcaAAAAAAAAAAAAAAAAAAAAtpm56zcuTJbL01cbF/5akbP5FkprbfNItP2G9bugdqHyL8a/fFUk3f94hyJic+zlTiz0NeQkEQvZnt8UFbs6F5ujGtWFHv9hAgAAAAAAAAAAAAAAAACAAmqYe9zcvs+6XCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6L4H9//v3EKvYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtqZ/AgAA//9ffTgl") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req={0x1, 0xfffeffff, 0x4, 0x5}, 0x10) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000780)=""/219, 0xdb}], 0x1, 0x3b, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9dfd) set_mempolicy(0x3, &(0x7f0000000040)=0x5, 0x8) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSBRK(r7, 0x5427) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 4m2.794217207s ago: executing program 5 (id=4762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x110) 4m2.038601149s ago: executing program 5 (id=4772): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000240)={0x0, 0x2}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, 0x50561}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r2, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r4, 0x7}, 0x80, 0x0}}], 0x1, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000380)=r7}, 0x20) recvmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) sync_file_range(r11, 0x8e, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4m1.983904912s ago: executing program 36 (id=4772): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000240)={0x0, 0x2}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, 0x50561}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r2, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r4, 0x7}, 0x80, 0x0}}], 0x1, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000380)=r7}, 0x20) recvmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) sync_file_range(r11, 0x8e, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m58.474384222s ago: executing program 1 (id=4813): setresuid(0x0, 0xee01, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x19, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18) socket$inet6(0xa, 0x80002, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000c80)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247", 0xad}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="e9afdaa01b78b604d2cf12e2bfba5492bdc346f1be8cd61d96", 0x19}], 0x1}}], 0x2, 0x54004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x84) 3m58.433157234s ago: executing program 1 (id=4817): r0 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0xe25f, 0x1000, 0x7, 0x3ca}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r0, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1000}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x18) io_uring_enter(r0, 0x47f8, 0x1e43, 0x2000000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r5, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES64=r2, @ANYRESDEC=r6], &(0x7f0000000240)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) 3m58.260322681s ago: executing program 1 (id=4824): fadvise64(0xffffffffffffffff, 0x5, 0xfffffffffffffffc, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x46, 0xd, &(0x7f0000000000)="4f2f9276694daee0cb03041267010e19973bf862215d5ba6b2dd51df2bb36e6a2ff970e74da3b1f16aeba0e171d44bf543469af60ae7198cc47ab3a39c6b6b60bbea4191fd92", &(0x7f0000000080)=""/13, 0x0, 0x0, 0xef, 0xf6, &(0x7f00000000c0)="680f7000e133263b783e02d895f2e148b5227fc0c870b9cbd6edf393847174cf5a31af0cae87d3823ac4a9a467177c5c05077eecfe0e3dd324fed42464d1f4549f8a9c88a6bc36f7cd748812107477e792b383ca9fafc0a5196d234e22a0193a6d8a261fb419dce7e444c1bb2a3b1f02e76dc984a9a859d42009d617f292a51951d5c7c268dfbdfde173a9d696ed96ca844d8a28e535e4360363e87956e7f9eef08cf3c1bb71c309b56e17e46d21a01081ce7c2f5c7be4cc5f3aa2a0fc98c7636b16c4038f434ea338a50d13f27182f45d53e240bfbe442beb82178eabec7afab5dcf5425afa7a4568ca861e304c48", &(0x7f00000001c0)="1cd5079e35d25b0e29b90caa6dda0b9cbf0f00af03c9b6452bc2d2164318ffa2c2e56f6833ce4fe84a05b79b2693e3ae2bd3aec83cc53dd519f48281b49deef5ccd7d0d2249792e1e72d9454a7bc13ec35bd6e7a010e40367b571129598d02d5c4c84bca9b6ea4ee896fffe0fdd32f67e7c6c344a7323159f9e5d77caa576b631bd59779573e1e1d905f2ca4fd1c9b1e56e4558824b15e7eedfbc070cf803b141d64dcd8a5f27a409a20a1d0114082c04c61b837e2b3dfae1dc44b0106455a2aa43146882d63ed09a38387f98445f3f3c03c54ef7a0a23c11b0f399ce71cf115a368990372377e94b23e76e71945a9de65d8b8e5135b", 0x6, 0x0, 0xb}, 0x50) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xfff, 0x18}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={0xffffffffffffffff, r0}, 0xc) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0xc00, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000400)=0x7, 0x2) bind$bt_hci(r2, &(0x7f0000000440)={0x1f, 0x2, 0x6}, 0x6) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000480)="03c8c2f777a80002241a0a55f2935c48af33a251ccb5c56e0bd79dc42013d072670353ab9519b8a4f3068beb1079ddfb2002fc4065653c74cf814a594b226f12a8aec4cebea7fb6cb2bd7769e4aec39a14f9d90da1deb539f1b8d80b47570154ab286a492c0db29e9333064a0d9d1b16beb61e7816738c8c9210d53354f72b93e42366b5e776abc86e8070e062063829d7", 0x91) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000540)) rmdir(&(0x7f0000000580)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xfd}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c041}, 0x4080000) mq_open(&(0x7f0000000700)='!,&\x00', 0x800, 0x34, &(0x7f0000000740)={0x66, 0x3, 0x70, 0xe135}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r7, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r8, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x40, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x400c000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xb, [@typedef={0x5, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x6, 0x2}, {0x7, 0x5}, {0xb, 0x5}, {0x1, 0x1}]}]}, {0x0, [0x30, 0x61, 0x30, 0x5f, 0x30, 0x5f, 0x30, 0x61, 0x2e]}}, &(0x7f0000000980)=""/253, 0x5b, 0xfd, 0x0, 0x2}, 0x28) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r8, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x822}, 0x20004020) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c00)={'nr0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) 3m58.094609499s ago: executing program 1 (id=4828): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@barrier}, {@noblock_validity}, {@mblk_io_submit}, {@data_err_ignore}, {@errors_remount}, {@inlinecrypt}]}, 0x6, 0x615, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req={0x1, 0xfffeffff, 0x4, 0x5}, 0x10) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000780)=""/219, 0xdb}], 0x1, 0x3b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9dfd) set_mempolicy(0x3, &(0x7f0000000040)=0x5, 0x8) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSBRK(r6, 0x5427) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 3m57.083117192s ago: executing program 7 (id=4836): r0 = socket$inet(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4011, 0x0, 0x90, [0x200000000100, 0x0, 0x0, 0x0, 0x200000000130], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0x108) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x127842, 0x80) write$binfmt_misc(r5, &(0x7f0000000100)="e4", 0x1) splice(r4, 0x0, r6, 0x0, 0x33fe0, 0x0) 3m57.077063692s ago: executing program 7 (id=4838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000240)={0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x4c, 0x0, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3ff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, 0x50561}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r3, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r5, 0x7}, 0x80, 0x0}}], 0x1, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000380)=r8}, 0x20) recvmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m57.058122303s ago: executing program 1 (id=4840): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') read$nci(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r9, 0x35, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB="0d00000018000000", @ANYBLOB, @ANYRES32=r8, @ANYBLOB, @ANYRES64=r10], 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r6, 0x31, 0x0, @val=@tcx={@void, @value=r4, @void, @void, r10}}, 0x1c) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 3m56.572332204s ago: executing program 7 (id=4847): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (fail_nth: 1) 3m56.415068021s ago: executing program 1 (id=4849): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12c}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010080}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5}, 0x10) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r6, 0x2, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x76fa, r8, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x2, r7, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2}]) syz_clone(0x4080080, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m56.402046591s ago: executing program 37 (id=4849): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12c}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010080}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5}, 0x10) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r6, 0x2, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x76fa, r8, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x2, r7, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2}]) syz_clone(0x4080080, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m56.353148783s ago: executing program 7 (id=4851): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@barrier}, {@noblock_validity}, {@mblk_io_submit}, {@data_err_ignore}, {@errors_remount}, {@inlinecrypt}]}, 0x6, 0x615, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req={0x1, 0xfffeffff, 0x4, 0x5}, 0x10) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000780)=""/219, 0xdb}], 0x1, 0x3b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9dfd) set_mempolicy(0x3, &(0x7f0000000040)=0x5, 0x8) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 3m55.468606691s ago: executing program 7 (id=4857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "54fcc1dbadb00b50", "f4d095d17fa5842e23149cba5969c47f", "8da40d64", "eb034ea618e777ea"}, 0x28) timer_settime(0x0, 0x1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5", 0x2f}], 0x1}, 0x40000) sendto$inet6(r1, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0x78) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x802}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) 3m54.661247686s ago: executing program 7 (id=4862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000240)={0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x4c, 0x0, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3ff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg(r3, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r5, 0x7}, 0x80, 0x0}}], 0x1, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000380)=r8}, 0x20) recvmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m54.632938857s ago: executing program 38 (id=4862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000240)={0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x4c, 0x0, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3ff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg(r3, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r5, 0x7}, 0x80, 0x0}}], 0x1, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000380)=r8}, 0x20) recvmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m11.985568551s ago: executing program 4 (id=7306): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x28, 0x8, &(0x7f0000000080)="b800000500000000e4a87b7253e8b478b1f5a000b84e9daa49995882f39660cfce5f5f40ddc1bb3d", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x50) syz_open_dev$sg(0x0, 0x0, 0x22c01) gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) io_setup(0xd6, &(0x7f0000000200)=0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000005c0)="018b0f91811de79b985e54aeb17d1e37a460b8e6c4cac771096d8b757d6ab477d46e3551ca156b007c436eb797fa3fd6cff62fdcbc733336b71bf7b44f9433b245cff57f151e552653a74d0ac82d95c0e5f73b3b51169ffdf85a3ec4c45702a4672b4a0363f291cd185e8f996404d0787a65d07d8800e2c7be046b8cebb87435810000000000000000000000f75dbf1dc9c5bedae576e00f0f380c13ff8d6a952e323eb05706b77631195accf7e295efecfc84168b3ce1f8fd8ddc3a62b5e90ef857d463f5cdadfb325e72b46e9b0c6b1bbc614b6568c310c010fa7782d0e4f94da85e", 0xe3}]) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) syz_io_uring_setup(0x80c, &(0x7f0000000440)={0x0, 0x6d83, 0x0, 0x40000000, 0x54}, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r8, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0x381b, 0x0, 0x0, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0a0000000800395032303030938f"], 0x15) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r7, 0x0, 0x3ffff) sendfile(r9, r7, 0x0, 0x7ffff000) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r4, 0x0, 0x7ffff000) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m10.84296973s ago: executing program 4 (id=7317): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x8001, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRES64=r0, @ANYBLOB="cafc77ca62834d8399aba0bfca8478abec895096592f7d5601bf31e33ff404c53894efbc5b042ac542f4326bda6ca5e6e077781fe4a4ff389a906e2d2bb662625e3a0432a9c2b2f58ed6e9da50bcd53040252f16f0547628c84a08aa9058b57281eaf7650d571a6d3babb912a6fff846d6710b1182eae2553bd85c5372de1625a88f749bdc95b0e566503aedce2193a80fed8c9458983fc4e8a1a8a6d8d9cd3add7ea6f16c3159f286df61b95eabf21078eb5c82ab6d205c7712cfe3f43412b95604863e6481a4d318"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000004000000040000000400000004000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000002a1d6c1a4657c815534f9bc9aff41a00cc8fab2a8292333b1fe0460755776a560c8fa220fdc7c369ab49ba71a7d10ce0b485d1493e8ca11f0349f74e07b328db17ed8f077e5bf2c180767b22cb0d32c8352bfd837b461e985d9f0e9769d634897decdf8e6f1bd1cecc55a76902", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000010c0)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_clone(0x43100000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) gettid() pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r7, 0xfffffffffffffc01, 0x0) 1m10.395553719s ago: executing program 4 (id=7318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) timer_delete(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000423972", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000440)={0x8, 0x9, 0x4, 0x9, 0xa, "efc64a26a83c8ffa332b3a5419e8ab2543c4ec"}) r9 = creat(&(0x7f0000000040)='./file7\x00', 0x1a2) fallocate(r9, 0x0, 0x9, 0x2000406) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x8, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='svc_alloc_arg_err\x00', r3, 0x0, 0x1fffffffc000}, 0x18) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) 1m9.945300919s ago: executing program 4 (id=7324): r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvtap0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, 0x0, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80c4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m9.415931261s ago: executing program 4 (id=7332): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5", 0x2f}], 0x1}, 0x40000) 1m9.195589211s ago: executing program 4 (id=7333): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x840, 0x300) 1m9.140076694s ago: executing program 39 (id=7333): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x840, 0x300) 45.015748402s ago: executing program 8 (id=7664): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0xfffffffffffffbff, 0x2c000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x10c000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) mlock2(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000200)=0x7dffeffc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r2, {0xd0}}, './file0\x00'}) close(r5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000001700)={0x4, 0x8, 0xfa00, {r7, 0x8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000080)=""/159, 0x9f}, {&(0x7f0000000140)=""/72, 0x48}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/57, 0x39}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000000500)=""/26, 0x1a}, {&(0x7f0000000540)=""/69, 0x45}], 0xa) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02", 0x2) 44.83588336s ago: executing program 8 (id=7667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000001c0)=ANY=[], 0x18) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) 44.783404192s ago: executing program 8 (id=7668): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file2\x00', 0x800081, &(0x7f0000000040)={[{@journal_dev}, {@bsdgroups}]}, 0x1, 0x598, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) fcntl$lock(r1, 0x24, &(0x7f0000000200)={0x2, 0x3, 0x180, 0x27, 0xffffffffffffffff}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 44.60690657s ago: executing program 8 (id=7671): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "03cf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b0000001600", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x4]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x82, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x3000}]) 43.91260031s ago: executing program 8 (id=7678): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 43.575317974s ago: executing program 8 (id=7686): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000600000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000100), 0x100) 43.575060664s ago: executing program 40 (id=7686): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000600000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000100), 0x100) 2.871778786s ago: executing program 0 (id=8208): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680), 0xfffffffffffffbff, 0x2c000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x10c000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) mlock2(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000006c0)={{r0}, "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"}) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000200)=0x7dffeffc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r2, {0xd0}}, './file0\x00'}) close(r5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000001700)={0x4, 0x8, 0xfa00, {r7, 0x8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000080)=""/159, 0x9f}, {&(0x7f0000000140)=""/72, 0x48}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/57, 0x39}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000000500)=""/26, 0x1a}, {&(0x7f0000000540)=""/69, 0x45}], 0xa) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff", 0x1) 2.79020962s ago: executing program 0 (id=8209): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x1, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, @private2, 0x8, 0x20, 0x9, 0x8a1c}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/113, 0x71}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r5 = memfd_secret(0x80000) fcntl$setlease(r5, 0x400, 0x0) mkdirat(r5, &(0x7f00000000c0)='./file0\x00', 0x2) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) ioctl$SG_IO(r3, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f00000014c0)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup(r7) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={[{'noac,'}]}) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x20000}, 0x18) 2.274786692s ago: executing program 9 (id=8215): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000240)={0x0, 0x2}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x40, 0x0, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3ff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, 0x50561}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r2, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r4, 0x7}, 0x80, 0x0}}], 0x1, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000380)=r7}, 0x20) recvmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) sync_file_range(r11, 0x8e, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.022681803s ago: executing program 9 (id=8219): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x82, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x3000}]) 1.941837576s ago: executing program 0 (id=8220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x7, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000001) 1.810245482s ago: executing program 9 (id=8221): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x5c4, &(0x7f0000000140)={0x0, 0x1e32, 0x0, 0x6, 0x2}, &(0x7f00000002c0), &(0x7f0000000580)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 1.37579029s ago: executing program 6 (id=8225): r0 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1103, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_WRITE_FIXED={0x5, 0x10, 0x0, @fd_index, 0xb9, 0x8, 0xa0, 0x2}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) 1.079563784s ago: executing program 0 (id=8227): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x8001, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRES64=r0, @ANYBLOB="cafc77ca62834d8399aba0bfca8478abec895096592f7d5601bf31e33ff404c53894efbc5b042ac542f4326bda6ca5e6e077781fe4a4ff389a906e2d2bb662625e3a0432a9c2b2f58ed6e9da50bcd53040252f16f0547628c84a08aa9058b57281eaf7650d571a6d3babb912a6fff846d6710b1182eae2553bd85c5372de1625a88f749bdc95b0e566503aedce2193a80fed8c9458983fc4e8a1a8a6d8d9cd3add7ea6f16c3159f286df61b95eabf21078eb5c82ab6d205c7712cfe3f43412b95604863e6481a4d318a04b7374d993"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000004000000040000000400000004000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000002a1d6c1a4657c815534f9bc9aff41a00cc8fab2a8292333b1fe0460755776a560c8fa220fdc7c369ab49ba71a7d10ce0b485d1493e8ca11f0349f74e07b328db17ed8f077e5bf2c180767b22cb0d32c8352bfd837b461e985d9f0e9769d634897decdf8e6f1bd1cecc55a76902", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000010c0)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r7, 0xfffffffffffffc01, 0x0) 990.441967ms ago: executing program 9 (id=8228): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x28, 0x8, &(0x7f0000000080)="b800000500000000e4a87b7253e8b478b1f5a000b84e9daa49995882f39660cfce5f5f40ddc1bb3d", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x50) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) io_setup(0xd6, &(0x7f0000000200)=0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000005c0)="018b0f91811de79b985e54aeb17d1e37a460b8e6c4cac771096d8b757d6ab477d46e3551ca156b007c436eb797fa3fd6cff62fdcbc733336b71bf7b44f9433b245cff57f151e552653a74d0ac82d95c0e5f73b3b51169ffdf85a3ec4c45702a4672b4a0363f291cd185e8f996404d0787a65d07d8800e2c7be046b8cebb87435810000000000000000000000f75dbf1dc9c5bedae576e00f0f380c13ff8d6a952e323eb05706b77631195accf7e295efecfc84168b3ce1f8fd8ddc3a62b5e90ef857d463f5cdadfb325e72b46e9b0c6b1bbc614b6568c310c010fa7782d0e4f94da85e", 0xe3}]) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) syz_io_uring_setup(0x80c, &(0x7f0000000440)={0x0, 0x6d83, 0x0, 0x40000000, 0x54}, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r8, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0x381b, 0x0, 0x0, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0a0000000800395032303030938f"], 0x15) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r7, 0x0, 0x3ffff) sendfile(r9, r7, 0x0, 0x7ffff000) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r4, 0x0, 0x7ffff000) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 886.761562ms ago: executing program 2 (id=8231): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xb4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x566, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 840.164933ms ago: executing program 2 (id=8232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xfffffffb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0xd30}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xf357}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0xffffff94) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@deltaction={0x14, 0x31, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40801) 839.362294ms ago: executing program 2 (id=8233): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfd, 0x1217, &(0x7f0000001f80)="$eJzs3E9rHGUcB/Bft6lJU/NHrdX2oA948TQ0OXgSJEgKkgWlNoVWEKZmokvG3ZBZAiti68mrZ1+CZ2+C7yAXX4O3XDz2II5kJrFpTLU9JBvs53PY+THP893nGfZhYZZ5dvfd77/cWK+y9XwYnXPnorMZkR6mSNGJA2+stMc7d1eWut3lmyndWLq18E5KafbNXz75ejIiLt3+afbnydiZ/3T398Xfdq7sXN3989YXvSr1qtQfnN9/o/xeWaS1XrWRpfRRWeRVkXr9qtgapjzdGwyGTft6OdjcHKW8vzYzvblVVFXK+6O0UYzScJCGW6OUf573+inLsjQzHTzRhf/usvrjw7quI+r6QrwQdV3XF2M6LsWLMROz8SAiXoqX45W4HK/GlXgtXo+rTa/TmD4AAAAAAAAAAAAAAAAAAAA8P/5t//9czNv/DwAAAAAAAAAAAAAAAAAAAKfg4zt3V5a63eWbKU1FlN9tr26vtse2fWk9elFGEddjLv6IZvd/q61vfNBdvp4a8/FteX8/f3979Xyb33vZyy80fyewn59o2g7yC20+PZ6fjOnD4y/GXFw+fvzFY/NT8fZbh/JZzMWvn8Ugylhrxn6U/2Yhpfc/7B7JX2v6AQAAwP9Blv527P17lj2pvc0/w+8DR+6vJ+LaxHivnYhq9NVG3imLraYoD4qpf5w5e0U8iDgD09grJh8/0zmhsTrx1J1vHz7zQ5yFz0vx1EVnDAv74pFFMu5vJk7Do2Uw7pkAAAAAAAAAAADwLE74ucKJOObJsvfGc6kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFztwLAAAAAAgzN86jY4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD///mTw34=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x40942, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xfffffbffa003e458, 0x100000000000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0xfffffffffffffff8}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 501.975128ms ago: executing program 2 (id=8236): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x82, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x3000}]) 500.717348ms ago: executing program 9 (id=8238): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') read$nci(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r7, 0x35, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0xb, 0x0, 0xffffffffffffffff, @void, @value, @void, @void, r8}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[], 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x31, 0x0, @val=@tcx={@void, @value=r3, @void, @void, r8}}, 0x1c) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 416.426782ms ago: executing program 6 (id=8240): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0xc77, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 367.927084ms ago: executing program 9 (id=8241): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x7}, 0x105530, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x4}, 0x50) r4 = socket(0x1e, 0x80004, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0), 0x0, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) write$tun(r6, 0x0, 0x0) r7 = io_uring_setup(0x4cd2, &(0x7f0000000180)={0x0, 0x782d, 0x12e01, 0x3, 0x96}) io_uring_enter(r7, 0x3983, 0x9e1, 0xc, &(0x7f00000000c0), 0x8) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x18001, 0x0) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r10, 0xffffffff80000502, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e00000000000000050000000200000002000000", @ANYRES32=r9, @ANYBLOB="04000000000000000000000000000000000000002af134a656fdeb941b66bc3429e92f97d15231f33125275e569f619219ab583ef96fae8762813e3b17b6ac1dcaab9fb074b3c7b9272bae707a32bbcd5466390e93fcc01f04d326bd49797fc4fcfab452a5ac33a0bb42c9ec243a003047966adf85b229a264003b2d3a6949eb3202259bb29ef9e37a1cc6aa07d0484db05e799ff14e212b5e6ef62a18ee03427ea3c19dd743ef09239acd53f6f18b116895c8eff45a5aeb7b193eef07428b367c51e83e75955772c04596d089a71dd35f563ee8c0c541557171cb8b4b0370cdf116e7c493e3b66a926aa5037b7a7d7a410581cb330820c626d6bd6534db1bebb3ce6799e9d089c95014d921f7243f341d", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="0000000003000000020000000500"/28], 0x50) r11 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r11) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 306.561106ms ago: executing program 6 (id=8242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 305.909056ms ago: executing program 6 (id=8243): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xb4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x566, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 274.078768ms ago: executing program 6 (id=8244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xfffffffb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0xd30}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xf357}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0xffffff94) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@deltaction={0x14, 0x31, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40801) 273.523328ms ago: executing program 6 (id=8245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000340)=0x9, 0x3a) 231.30165ms ago: executing program 0 (id=8246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x3c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) 220.857681ms ago: executing program 2 (id=8247): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfd, 0x1217, &(0x7f0000001f80)="$eJzs3E9rHGUcB/Bft6lJU/NHrdX2oA948TQ0OXgSJEgKkgWlNoVWEKZmokvG3ZBZAiti68mrZ1+CZ2+C7yAXX4O3XDz2II5kJrFpTLU9JBvs53PY+THP893nGfZhYZZ5dvfd77/cWK+y9XwYnXPnorMZkR6mSNGJA2+stMc7d1eWut3lmyndWLq18E5KafbNXz75ejIiLt3+afbnydiZ/3T398Xfdq7sXN3989YXvSr1qtQfnN9/o/xeWaS1XrWRpfRRWeRVkXr9qtgapjzdGwyGTft6OdjcHKW8vzYzvblVVFXK+6O0UYzScJCGW6OUf573+inLsjQzHTzRhf/usvrjw7quI+r6QrwQdV3XF2M6LsWLMROz8SAiXoqX45W4HK/GlXgtXo+rTa/TmD4AAAAAAAAAAAAAAAAAAAA8P/5t//9czNv/DwAAAAAAAAAAAAAAAAAAAKfg4zt3V5a63eWbKU1FlN9tr26vtse2fWk9elFGEddjLv6IZvd/q61vfNBdvp4a8/FteX8/f3979Xyb33vZyy80fyewn59o2g7yC20+PZ6fjOnD4y/GXFw+fvzFY/NT8fZbh/JZzMWvn8Ugylhrxn6U/2Yhpfc/7B7JX2v6AQAAwP9Blv527P17lj2pvc0/w+8DR+6vJ+LaxHivnYhq9NVG3imLraYoD4qpf5w5e0U8iDgD09grJh8/0zmhsTrx1J1vHz7zQ5yFz0vx1EVnDAv74pFFMu5vJk7Do2Uw7pkAAAAAAAAAAADwLE74ucKJOObJsvfGc6kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFztwLAAAAAAgzN86jY4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD///mTw34=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x40942, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xfffffbffa003e458, 0x100000000000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0xfffffffffffffff8}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 211.054921ms ago: executing program 0 (id=8248): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x8001, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRES64=r0, @ANYBLOB="cafc77ca62834d8399aba0bfca8478abec895096592f7d5601bf31e33ff404c53894efbc5b042ac542f4326bda6ca5e6e077781fe4a4ff389a906e2d2bb662625e3a0432a9c2b2f58ed6e9da50bcd53040252f16f0547628c84a08aa9058b57281eaf7650d571a6d3babb912a6fff846d6710b1182eae2553bd85c5372de1625a88f749bdc95b0e566503aedce2193a80fed8c9458983fc4e8a1a8a6d8d9cd3add7ea6f16c3159f286df61b95eabf21078eb5c82ab6d205c7712cfe3f43412b95604863e6481a4d318a04b7374d993"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000004000000040000000400000004000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000002a1d6c1a4657c815534f9bc9aff41a00cc8fab2a8292333b1fe0460755776a560c8fa220fdc7c369ab49ba71a7d10ce0b485d1493e8ca11f0349f74e07b328db17ed8f077e5bf2c180767b22cb0d32c8352bfd837b461e985d9f0e9769d634897decdf8e6f1bd1cecc55a76902", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000010c0)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_clone(0x43100000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) gettid() pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r7, 0xfffffffffffffc01, 0x0) 144.177754ms ago: executing program 3 (id=8251): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') read$nci(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r7, 0x35, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0xb, 0x0, 0xffffffffffffffff, @void, @value, @void, @void, r8}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[], 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x31, 0x0, @val=@tcx={@void, @value=r3, @void, @void, r8}}, 0x1c) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 89.298196ms ago: executing program 3 (id=8252): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0xc77, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 40.471088ms ago: executing program 2 (id=8253): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000240)={0x0, 0x2}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x40, 0x0, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3ff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, 0x50561}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r2, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r4, 0x7}, 0x80, 0x0}}], 0x1, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000380)=r7}, 0x20) recvmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) sync_file_range(r11, 0x8e, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 40.141038ms ago: executing program 3 (id=8254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 39.327538ms ago: executing program 3 (id=8255): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xb4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x566, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 945.87µs ago: executing program 3 (id=8256): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xfffffffb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0xd30}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xf357}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x3f8, 0x4, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4000840}, 0x8000) r2 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0xffffff94) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@deltaction={0x14, 0x31, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40801) 0s ago: executing program 3 (id=8257): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x28, 0x8, &(0x7f0000000080)="b800000500000000e4a87b7253e8b478b1f5a000b84e9daa49995882f39660cfce5f5f40ddc1bb3d", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x50) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) io_setup(0xd6, &(0x7f0000000200)=0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000005c0)="018b0f91811de79b985e54aeb17d1e37a460b8e6c4cac771096d8b757d6ab477d46e3551ca156b007c436eb797fa3fd6cff62fdcbc733336b71bf7b44f9433b245cff57f151e552653a74d0ac82d95c0e5f73b3b51169ffdf85a3ec4c45702a4672b4a0363f291cd185e8f996404d0787a65d07d8800e2c7be046b8cebb87435810000000000000000000000f75dbf1dc9c5bedae576e00f0f380c13ff8d6a952e323eb05706b77631195accf7e295efecfc84168b3ce1f8fd8ddc3a62b5e90ef857d463f5cdadfb325e72b46e9b0c6b1bbc614b6568c310c010fa7782d0e4f94da85e", 0xe3}]) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) syz_io_uring_setup(0x80c, &(0x7f0000000440)={0x0, 0x6d83, 0x0, 0x40000000, 0x54}, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r8, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0x381b, 0x0, 0x0, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0a0000000800395032303030938f"], 0x15) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r7, 0x0, 0x3ffff) sendfile(r9, r7, 0x0, 0x7ffff000) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r4, 0x0, 0x7ffff000) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): cess `syz.8.7549'. [ 537.121161][T28924] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7549'. [ 537.130139][T28924] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7549'. [ 537.150617][T28924] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7549'. [ 537.159595][T28924] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7549'. [ 537.168554][T28924] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7549'. [ 537.201405][T28924] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7549'. [ 537.210496][T28924] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7549'. [ 537.219467][T28924] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7549'. [ 537.457599][T28930] loop8: detected capacity change from 0 to 512 [ 537.470286][T28930] EXT4-fs (loop8): orphan cleanup on readonly fs [ 537.486212][T28930] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.7550: bad orphan inode 13 [ 537.497155][T28930] ext4_test_bit(bit=12, block=18) = 1 [ 537.502698][T28930] is_bad_inode(inode)=0 [ 537.506846][T28930] NEXT_ORPHAN(inode)=2130706432 [ 537.511710][T28930] max_ino=32 [ 537.514994][T28930] i_nlink=1 [ 537.528554][T28930] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 537.544754][T28930] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 537.572458][T28930] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 537.727679][T28950] lo speed is unknown, defaulting to 1000 [ 537.753874][T28950] wg1 speed is unknown, defaulting to 1000 [ 537.792831][T28950] lo speed is unknown, defaulting to 1000 [ 537.841186][T28964] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 537.866684][T28964] vhci_hcd vhci_hcd.2: invalid port number 96 [ 537.876253][T28964] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 537.931440][T29125] $Hÿ: renamed from bond0 (while UP) [ 537.940625][T29125] $Hÿ: entered promiscuous mode [ 537.945759][T29125] bond_slave_0: entered promiscuous mode [ 537.951504][T29125] bond_slave_1: entered promiscuous mode [ 537.966943][T29125] pimreg: entered allmulticast mode [ 537.979748][T29125] pimreg: left allmulticast mode [ 537.989807][T29130] lo speed is unknown, defaulting to 1000 [ 538.008946][T29130] wg1 speed is unknown, defaulting to 1000 [ 538.083076][T29130] lo speed is unknown, defaulting to 1000 [ 538.113420][T16653] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.253358][T29541] loop3: detected capacity change from 0 to 8192 [ 538.300161][T29541] loop3: p1 p2 < > p3 p4 < p5 > [ 538.305222][T29541] loop3: partition table partially beyond EOD, truncated [ 538.312600][T29541] loop3: p1 size 100663296 extends beyond EOD, truncated [ 538.321055][T29541] loop3: p2 start 591104 is beyond EOD, truncated [ 538.327511][T29541] loop3: p3 start 33572980 is beyond EOD, truncated [ 538.335243][T29541] loop3: p5 size 100663296 extends beyond EOD, truncated [ 538.361062][T29541] 9pnet_fd: Insufficient options for proto=fd [ 538.771428][T29873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7570'. [ 538.862917][T29879] 9pnet_fd: Insufficient options for proto=fd [ 538.922700][T29883] loop3: detected capacity change from 0 to 512 [ 538.948996][T29883] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.7574: error while reading EA inode 32 err=-116 [ 538.963139][T29883] EXT4-fs (loop3): Remounting filesystem read-only [ 538.970570][T29883] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 538.985397][T29883] EXT4-fs (loop3): 1 orphan inode deleted [ 538.996511][T29883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.027298][T23175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.082693][T29889] lo speed is unknown, defaulting to 1000 [ 539.089021][T29889] wg1 speed is unknown, defaulting to 1000 [ 539.131832][T29889] lo speed is unknown, defaulting to 1000 [ 539.157261][T29899] siw: device registration error -23 [ 539.291988][T30030] loop3: detected capacity change from 0 to 8192 [ 539.338202][T30030] loop3: p1 p2 < > p3 p4 < p5 > [ 539.343252][T30030] loop3: partition table partially beyond EOD, truncated [ 539.351209][T30030] loop3: p1 size 100663296 extends beyond EOD, truncated [ 539.359200][T30030] loop3: p2 start 591104 is beyond EOD, truncated [ 539.365655][T30030] loop3: p3 start 33572980 is beyond EOD, truncated [ 539.373498][T30030] loop3: p5 size 100663296 extends beyond EOD, truncated [ 539.466890][T30242] siw: device registration error -23 [ 539.499050][T30308] lo speed is unknown, defaulting to 1000 [ 539.529161][T30308] wg1 speed is unknown, defaulting to 1000 [ 539.554074][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 539.554089][ T29] audit: type=1326 audit(1765124515.907:25750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30345 comm="syz.9.7584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799566f749 code=0x7ffc0000 [ 539.581990][T30308] lo speed is unknown, defaulting to 1000 [ 539.707838][ T29] audit: type=1326 audit(1765124515.997:25751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30345 comm="syz.9.7584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f799566f749 code=0x7ffc0000 [ 539.731592][ T29] audit: type=1326 audit(1765124515.997:25752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30345 comm="syz.9.7584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799566f749 code=0x7ffc0000 [ 539.766527][T30538] loop3: detected capacity change from 0 to 512 [ 539.816556][T30538] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.7587: error while reading EA inode 32 err=-116 [ 539.834567][T30538] EXT4-fs (loop3): Remounting filesystem read-only [ 539.842093][T30538] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 539.854099][T30538] EXT4-fs (loop3): 1 orphan inode deleted [ 539.888466][T30528] loop9: detected capacity change from 0 to 512 [ 539.896473][T30528] EXT4-fs (loop9): orphan cleanup on readonly fs [ 539.919897][T30538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.935360][T30528] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.7586: bad orphan inode 13 [ 539.949324][T30528] ext4_test_bit(bit=12, block=18) = 1 [ 539.954870][T30528] is_bad_inode(inode)=0 [ 539.959092][T30528] NEXT_ORPHAN(inode)=2130706432 [ 539.963942][T30528] max_ino=32 [ 539.967143][T30528] i_nlink=1 [ 539.976632][T23175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.988135][T30528] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 540.028652][T30528] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 540.048327][T30528] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 540.057065][T30838] program syz.0.7588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 540.152417][T30859] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 540.160548][T30859] vhci_hcd vhci_hcd.2: invalid port number 96 [ 540.167043][T30859] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 540.233395][T30862] loop3: detected capacity change from 0 to 8192 [ 540.290420][T30862] loop3: p1 p2 < > p3 p4 < p5 > [ 540.295392][T30862] loop3: partition table partially beyond EOD, truncated [ 540.304750][T30862] loop3: p1 size 100663296 extends beyond EOD, truncated [ 540.313342][T30862] loop3: p2 start 591104 is beyond EOD, truncated [ 540.319820][T30862] loop3: p3 start 33572980 is beyond EOD, truncated [ 540.326970][T30862] loop3: p5 size 100663296 extends beyond EOD, truncated [ 540.591660][T16869] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.660780][T30895] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.691498][T30877] loop6: detected capacity change from 0 to 512 [ 540.700607][T30877] EXT4-fs (loop6): orphan cleanup on readonly fs [ 540.710499][T30895] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.722642][T30877] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.7598: bad orphan inode 13 [ 540.733091][T30877] ext4_test_bit(bit=12, block=18) = 1 [ 540.738621][T30877] is_bad_inode(inode)=0 [ 540.742906][T30877] NEXT_ORPHAN(inode)=2130706432 [ 540.747807][T30877] max_ino=32 [ 540.751009][T30877] i_nlink=1 [ 540.752525][T30905] loop9: detected capacity change from 0 to 256 [ 540.754786][T30877] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 540.774963][T30877] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 540.785390][T30905] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 540.799664][T30895] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.810962][ T29] audit: type=1326 audit(1765124517.157:25753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30893 comm="syz.9.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799566f749 code=0x7ffc0000 [ 540.834621][ T29] audit: type=1326 audit(1765124517.157:25754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30893 comm="syz.9.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799566f749 code=0x7ffc0000 [ 540.843416][T30877] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 540.858314][ T29] audit: type=1326 audit(1765124517.157:25755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30893 comm="syz.9.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f799566f749 code=0x7ffc0000 [ 540.890336][ T29] audit: type=1326 audit(1765124517.157:25756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30893 comm="syz.9.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799566f749 code=0x7ffc0000 [ 540.913912][ T29] audit: type=1326 audit(1765124517.157:25757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30893 comm="syz.9.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f799566f749 code=0x7ffc0000 [ 540.937653][ T29] audit: type=1326 audit(1765124517.157:25758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30893 comm="syz.9.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799566f749 code=0x7ffc0000 [ 540.961367][ T29] audit: type=1326 audit(1765124517.157:25759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30893 comm="syz.9.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f799566f749 code=0x7ffc0000 [ 541.037739][T30895] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.088946][T15284] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.123218][T15284] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.173171][T15284] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.182022][T15284] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.285078][T30928] lo speed is unknown, defaulting to 1000 [ 541.308199][T30928] wg1 speed is unknown, defaulting to 1000 [ 541.354848][T30928] lo speed is unknown, defaulting to 1000 [ 541.503740][T20339] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.553274][T30944] loop6: detected capacity change from 0 to 1024 [ 541.564562][T30944] EXT4-fs: Ignoring removed orlov option [ 541.572963][T30932] loop9: detected capacity change from 0 to 512 [ 541.581332][T30944] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.595259][T30944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.595613][T30932] EXT4-fs (loop9): orphan cleanup on readonly fs [ 541.648675][T30932] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.7611: bad orphan inode 13 [ 541.659738][T30932] ext4_test_bit(bit=12, block=18) = 1 [ 541.665140][T30932] is_bad_inode(inode)=0 [ 541.669326][T30932] NEXT_ORPHAN(inode)=2130706432 [ 541.674227][T30932] max_ino=32 [ 541.677450][T30932] i_nlink=1 [ 541.691290][T30932] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 541.728034][T30932] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 541.758437][T30932] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 542.289798][T16869] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.330279][T30962] __nla_validate_parse: 21 callbacks suppressed [ 542.330295][T30962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7620'. [ 542.424009][T30968] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.480739][T30968] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.529623][T30968] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.579931][T30968] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.655931][T15246] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.668729][T30976] loop3: detected capacity change from 0 to 512 [ 542.672272][T15290] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.685601][T30976] EXT4-fs (loop3): orphan cleanup on readonly fs [ 542.692402][T30976] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.7625: bad orphan inode 13 [ 542.708273][T15290] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.718778][T30976] ext4_test_bit(bit=12, block=18) = 1 [ 542.724168][T30976] is_bad_inode(inode)=0 [ 542.728409][T30976] NEXT_ORPHAN(inode)=2130706432 [ 542.733262][T30976] max_ino=32 [ 542.734189][T15290] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.736461][T30976] i_nlink=1 [ 542.748339][T30976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 542.763624][T30976] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 542.790263][T30976] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 542.790913][T30986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7628'. [ 542.857189][T30984] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 542.866547][T30984] vhci_hcd vhci_hcd.2: invalid port number 96 [ 542.873643][T30984] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 543.011432][T30993] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.7630: error while reading EA inode 32 err=-116 [ 543.025268][T30993] EXT4-fs (loop9): Remounting filesystem read-only [ 543.032443][T30993] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 543.044145][T30993] EXT4-fs (loop9): 1 orphan inode deleted [ 543.059201][T30993] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.094326][T30989] EXT4-fs (loop8): orphan cleanup on readonly fs [ 543.121445][T30989] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.7629: bad orphan inode 13 [ 543.132062][T30989] ext4_test_bit(bit=12, block=18) = 1 [ 543.137566][T30989] is_bad_inode(inode)=0 [ 543.141795][T30989] NEXT_ORPHAN(inode)=2130706432 [ 543.146924][T30989] max_ino=32 [ 543.150137][T30989] i_nlink=1 [ 543.153881][T30989] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 543.169046][T30989] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 543.184600][T16869] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.194015][T30989] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 543.327702][T23175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.684776][T31021] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 543.693441][T31021] FAT-fs (loop3): Filesystem has been set read-only [ 543.756982][T31027] lo speed is unknown, defaulting to 1000 [ 543.763180][T31027] wg1 speed is unknown, defaulting to 1000 [ 543.769730][T16653] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.836308][T31027] lo speed is unknown, defaulting to 1000 [ 543.843906][T31033] siw: device registration error -23 [ 544.020509][T31036] set_capacity_and_notify: 3 callbacks suppressed [ 544.020526][T31036] loop8: detected capacity change from 0 to 512 [ 544.048709][T31036] EXT4-fs (loop8): orphan cleanup on readonly fs [ 544.056019][T31036] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.7645: bad orphan inode 13 [ 544.066520][T31036] ext4_test_bit(bit=12, block=18) = 1 [ 544.071935][T31036] is_bad_inode(inode)=0 [ 544.076094][T31036] NEXT_ORPHAN(inode)=2130706432 [ 544.081020][T31036] max_ino=32 [ 544.084225][T31036] i_nlink=1 [ 544.089130][T31036] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 544.105285][T31036] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 544.118481][T31036] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 544.158540][T31053] loop3: detected capacity change from 0 to 256 [ 544.166101][T31053] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 544.179044][T31053] FAT-fs (loop3): error, corrupted file size (i_pos 196, 3938) [ 544.186610][T31053] FAT-fs (loop3): Filesystem has been set read-only [ 544.679030][T16653] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.804978][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 544.805049][ T29] audit: type=1326 audit(1765124521.157:25925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31074 comm="syz.8.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b878bf749 code=0x7ffc0000 [ 544.896129][ T29] audit: type=1326 audit(1765124521.187:25926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31074 comm="syz.8.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f5b87876357 code=0x7ffc0000 [ 544.919986][ T29] audit: type=1326 audit(1765124521.187:25927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31074 comm="syz.8.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5b878763b6 code=0x7ffc0000 [ 544.943530][ T29] audit: type=1326 audit(1765124521.187:25928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31074 comm="syz.8.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5b878bf34b code=0x7ffc0000 [ 544.967143][ T29] audit: type=1326 audit(1765124521.187:25929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31074 comm="syz.8.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5b878bf749 code=0x7ffc0000 [ 544.990780][ T29] audit: type=1326 audit(1765124521.187:25930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31074 comm="syz.8.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b878bf749 code=0x7ffc0000 [ 545.014377][ T29] audit: type=1326 audit(1765124521.187:25931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31074 comm="syz.8.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b878bf749 code=0x7ffc0000 [ 545.038082][ T29] audit: type=1326 audit(1765124521.187:25932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31074 comm="syz.8.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5b878bf749 code=0x7ffc0000 [ 545.061671][ T29] audit: type=1326 audit(1765124521.187:25933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31074 comm="syz.8.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5b878bf749 code=0x7ffc0000 [ 545.085225][ T29] audit: type=1326 audit(1765124521.157:25924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31074 comm="syz.8.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b878bf749 code=0x7ffc0000 [ 545.110652][T31083] siw: device registration error -23 [ 545.117346][T31083] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7663'. [ 545.230223][T31085] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 545.241324][T31086] program syz.0.7662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 545.250835][T31085] vhci_hcd vhci_hcd.2: invalid port number 96 [ 545.257260][T31085] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 545.348998][T31088] loop6: detected capacity change from 0 to 8192 [ 545.368581][T31088] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 545.428827][T31092] loop8: detected capacity change from 0 to 1024 [ 545.454070][T31092] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 545.572528][T16653] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.639537][T31096] loop9: detected capacity change from 0 to 512 [ 545.653039][T31096] EXT4-fs (loop9): orphan cleanup on readonly fs [ 545.655735][T31105] loop8: detected capacity change from 0 to 2048 [ 545.678114][T31105] EXT4-fs: Ignoring removed i_version option [ 545.687158][T31096] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.7669: bad orphan inode 13 [ 545.709434][T31096] ext4_test_bit(bit=12, block=18) = 1 [ 545.714834][T31096] is_bad_inode(inode)=0 [ 545.719214][T31096] NEXT_ORPHAN(inode)=2130706432 [ 545.724073][T31096] max_ino=32 [ 545.727306][T31096] i_nlink=1 [ 545.731136][T31105] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.747824][T31105] ext4 filesystem being mounted at /576/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.755698][T31096] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 545.776065][T31096] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 545.799415][T31096] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 545.807953][T31105] loop8: detected capacity change from 2048 to 0 [ 545.815694][T31105] EXT4-fs error (device loop8): ext4_get_inode_loc:4968: inode #18: block 5: comm syz.8.7671: unable to read itable block [ 545.832628][T31103] loop3: detected capacity change from 0 to 512 [ 545.842167][T31105] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 545.850559][T31105] EXT4-fs (loop8): I/O error while writing superblock [ 545.857353][T31105] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: IO failure [ 545.866355][T31105] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 545.867697][T31103] EXT4-fs (loop3): orphan cleanup on readonly fs [ 545.874692][T31105] EXT4-fs (loop8): I/O error while writing superblock [ 545.887882][T31105] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #18: comm syz.8.7671: mark_inode_dirty error [ 545.891310][T31103] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.7672: bad orphan inode 13 [ 545.899233][T31105] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 545.899255][T31105] EXT4-fs (loop8): I/O error while writing superblock [ 545.899360][T31105] EXT4-fs error (device loop8): ext4_wait_block_bitmap:584: comm syz.8.7671: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 545.938586][T31105] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 545.940964][T31103] ext4_test_bit(bit=12, block=18) = 1 [ 545.946854][T31105] EXT4-fs (loop8): I/O error while writing superblock [ 545.952268][T31103] is_bad_inode(inode)=0 [ 545.959056][T31105] EXT4-fs error (device loop8): ext4_get_inode_loc:4968: inode #18: block 5: comm syz.8.7671: unable to read itable block [ 545.963175][T31103] NEXT_ORPHAN(inode)=2130706432 [ 545.975889][T31105] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 545.980713][T31103] max_ino=32 [ 545.980722][T31103] i_nlink=1 [ 545.989217][T31105] EXT4-fs (loop8): I/O error while writing superblock [ 545.992842][T31103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 545.995464][T31105] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: IO failure [ 546.024829][T31103] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 546.034293][T31105] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 546.042895][T31105] EXT4-fs (loop8): I/O error while writing superblock [ 546.049742][T31105] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #18: comm syz.8.7671: mark_inode_dirty error [ 546.061257][T31105] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 546.061565][T31103] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 546.069532][T31105] EXT4-fs (loop8): I/O error while writing superblock [ 546.069682][T31105] EXT4-fs error (device loop8): ext4_get_inode_loc:4968: inode #18: block 5: comm syz.8.7671: unable to read itable block [ 546.099184][T31105] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 546.107446][T31105] EXT4-fs (loop8): I/O error while writing superblock [ 546.114253][T31105] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: IO failure [ 546.123001][T31105] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 546.131407][T31105] EXT4-fs (loop8): I/O error while writing superblock [ 546.138245][T31105] EXT4-fs error (device loop8): ext4_ext_truncate:4475: inode #18: comm syz.8.7671: mark_inode_dirty error [ 546.149856][T31105] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 546.399263][T16869] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.553403][T15289] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.563296][T15289] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.576161][T31138] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 546.585781][T31138] vhci_hcd vhci_hcd.2: invalid port number 96 [ 546.592318][T31138] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 546.616479][T23175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.629374][T31141] pimreg: entered allmulticast mode [ 546.653909][T15289] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.663843][T15289] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.690048][T31140] pimreg: left allmulticast mode [ 546.707707][T31148] gretap1: entered promiscuous mode [ 546.725168][T15289] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.735008][T15289] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.766490][T31153] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7691'. [ 546.775538][T31153] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7691'. [ 546.784508][T31153] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7691'. [ 546.820318][T15289] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.830167][T15289] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.850645][T31153] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7691'. [ 546.859697][T31153] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7691'. [ 546.868662][T31153] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7691'. [ 546.891327][T31144] lo speed is unknown, defaulting to 1000 [ 546.897378][T31144] wg1 speed is unknown, defaulting to 1000 [ 546.947322][T31144] lo speed is unknown, defaulting to 1000 [ 546.980456][T15289] bridge_slave_1: left allmulticast mode [ 546.986121][T15289] bridge_slave_1: left promiscuous mode [ 546.991872][T15289] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.992821][T31153] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7691'. [ 547.018947][T15289] bridge_slave_0: left allmulticast mode [ 547.024624][T15289] bridge_slave_0: left promiscuous mode [ 547.030426][T15289] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.270612][T15289] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.282009][T15289] bond_slave_0: left promiscuous mode [ 547.290707][T15289] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.311397][T15289] bond_slave_1: left promiscuous mode [ 547.317639][T15289] $Hÿ (unregistering): Released all slaves [ 547.347534][T31176] lo speed is unknown, defaulting to 1000 [ 547.353881][T31176] wg1 speed is unknown, defaulting to 1000 [ 547.448602][T31176] lo speed is unknown, defaulting to 1000 [ 547.526921][T15289] hsr_slave_0: left promiscuous mode [ 547.532809][T15289] hsr_slave_1: left promiscuous mode [ 547.541586][T15289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.549078][T15289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.556789][T15289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.564199][T15289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.572476][T31189] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 547.580891][T31189] vhci_hcd vhci_hcd.2: invalid port number 96 [ 547.580956][T15289] veth1_macvtap: left promiscuous mode [ 547.580998][T15289] veth0_macvtap: left promiscuous mode [ 547.587112][T31189] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 547.592837][T15289] veth1_vlan: left promiscuous mode [ 547.611550][T15289] veth0_vlan: left promiscuous mode [ 547.680315][T15289] pim6reg (unregistering): left allmulticast mode [ 547.716715][T15289] team0 (unregistering): Port device team_slave_1 removed [ 547.727571][T15289] team0 (unregistering): Port device team_slave_0 removed [ 547.768509][T31144] chnl_net:caif_netlink_parms(): no params data found [ 547.812763][T31144] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.819945][T31144] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.827210][T31144] bridge_slave_0: entered allmulticast mode [ 547.833689][T31144] bridge_slave_0: entered promiscuous mode [ 547.840614][T31144] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.847728][T31144] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.855019][T31144] bridge_slave_1: entered allmulticast mode [ 547.861851][T31144] bridge_slave_1: entered promiscuous mode [ 547.880920][T31144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.891555][T31144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.912130][T31144] team0: Port device team_slave_0 added [ 547.918891][T31144] team0: Port device team_slave_1 added [ 547.936592][T31144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.943631][T31144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.969628][T31144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.981075][T31144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.988114][T31144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.014065][T31144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.044827][T31144] hsr_slave_0: entered promiscuous mode [ 548.051212][T31144] hsr_slave_1: entered promiscuous mode [ 548.057140][T31144] debugfs: 'hsr0' already exists in 'hsr' [ 548.062925][T31144] Cannot create hsr debugfs directory [ 548.072541][T31208] loop6: detected capacity change from 0 to 512 [ 548.081889][T31208] EXT4-fs (loop6): orphan cleanup on readonly fs [ 548.088931][T31208] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.7707: bad orphan inode 13 [ 548.099617][T31208] ext4_test_bit(bit=12, block=18) = 1 [ 548.105012][T31208] is_bad_inode(inode)=0 [ 548.109198][T31208] NEXT_ORPHAN(inode)=2130706432 [ 548.114049][T31208] max_ino=32 [ 548.117258][T31208] i_nlink=1 [ 548.120936][T31208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 548.134423][T31208] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 548.161154][T31208] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 548.202290][T31219] netlink: 'syz.3.7710': attribute type 39 has an invalid length. [ 548.231968][T31220] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 548.242257][T31220] vhci_hcd vhci_hcd.2: invalid port number 96 [ 548.248670][T31220] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 548.446790][T31144] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 548.455726][T31144] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 548.465034][T31144] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 548.474656][T31144] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 548.526587][T31237] loop9: detected capacity change from 0 to 256 [ 548.534436][T31237] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 548.536974][T31144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.552724][T31237] FAT-fs (loop9): error, corrupted file size (i_pos 196, 3938) [ 548.560372][T31237] FAT-fs (loop9): Filesystem has been set read-only [ 548.568782][T31144] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.579557][T15289] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.586679][T15289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.599188][T15246] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.606400][T15246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.698948][T20339] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.699155][T31144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.789426][T31144] veth0_vlan: entered promiscuous mode [ 548.798879][T31144] veth1_vlan: entered promiscuous mode [ 548.821384][T31144] veth0_macvtap: entered promiscuous mode [ 548.829695][T31144] veth1_macvtap: entered promiscuous mode [ 548.843265][T31144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.857173][T31144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.871376][T15290] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.891396][T15290] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.918227][T15290] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.930668][T31254] lo speed is unknown, defaulting to 1000 [ 548.936772][T31254] wg1 speed is unknown, defaulting to 1000 [ 548.942924][T15290] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.993662][T31254] lo speed is unknown, defaulting to 1000 [ 549.051428][T31259] loop6: detected capacity change from 0 to 512 [ 549.098498][T31259] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.7720: error while reading EA inode 32 err=-116 [ 549.112492][T31259] EXT4-fs (loop6): Remounting filesystem read-only [ 549.136932][T31259] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 549.148014][T31259] EXT4-fs (loop6): 1 orphan inode deleted [ 549.161838][T31266] __nla_validate_parse: 11 callbacks suppressed [ 549.161931][T31266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7721'. [ 549.177233][T31266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7721'. [ 549.186212][T31266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7721'. [ 549.205360][T31259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.206001][T31266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7721'. [ 549.226759][T31266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7721'. [ 549.235765][T31266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7721'. [ 549.263769][T31266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7721'. [ 549.272867][T31266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7721'. [ 549.281907][T31266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7721'. [ 549.533817][T31283] lo speed is unknown, defaulting to 1000 [ 549.549187][T31279] loop3: detected capacity change from 0 to 512 [ 549.558560][T31283] wg1 speed is unknown, defaulting to 1000 [ 549.570375][T31279] EXT4-fs (loop3): orphan cleanup on readonly fs [ 549.572454][T15189] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.577072][T31279] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.7725: bad orphan inode 13 [ 549.620513][T31279] ext4_test_bit(bit=12, block=18) = 1 [ 549.626028][T31279] is_bad_inode(inode)=0 [ 549.630394][T31279] NEXT_ORPHAN(inode)=2130706432 [ 549.635326][T31279] max_ino=32 [ 549.638613][T31279] i_nlink=1 [ 549.644586][T31283] lo speed is unknown, defaulting to 1000 [ 549.649781][T31279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 549.675568][T31279] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 549.676571][T15189] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.715526][T31279] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 549.742792][T15189] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.802676][T15189] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.840227][T31283] chnl_net:caif_netlink_parms(): no params data found [ 549.859435][T31612] loop9: detected capacity change from 0 to 8192 [ 549.892420][T31283] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.899661][T31283] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.906938][T31283] bridge_slave_0: entered allmulticast mode [ 549.913210][T20339] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.919026][T31612] loop9: p1 p2 < > p3 p4 < p5 > [ 549.923515][T31283] bridge_slave_0: entered promiscuous mode [ 549.927149][T31612] loop9: partition table partially beyond EOD, truncated [ 549.936241][T31283] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.947215][T31283] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.954347][T31612] loop9: p1 size 100663296 extends beyond EOD, truncated [ 549.958070][T31283] bridge_slave_1: entered allmulticast mode [ 549.969301][T31283] bridge_slave_1: entered promiscuous mode [ 549.975402][T31506] loop2: detected capacity change from 0 to 512 [ 549.985110][T31506] EXT4-fs (loop2): orphan cleanup on readonly fs [ 549.988953][T31612] loop9: p2 start 591104 is beyond EOD, truncated [ 549.997924][T31612] loop9: p3 start 33572980 is beyond EOD, truncated [ 550.004701][T31506] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7731: bad orphan inode 13 [ 550.016262][T31506] ext4_test_bit(bit=12, block=18) = 1 [ 550.021692][T31506] is_bad_inode(inode)=0 [ 550.025950][T31506] NEXT_ORPHAN(inode)=2130706432 [ 550.029491][T31612] loop9: p5 size 100663296 extends beyond EOD, truncated [ 550.030861][T31506] max_ino=32 [ 550.030871][T31506] i_nlink=1 [ 550.048062][T15189] bridge_slave_1: left allmulticast mode [ 550.053800][T15189] bridge_slave_1: left promiscuous mode [ 550.057235][T31506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 550.059547][T15189] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.080373][T31506] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 550.093427][T15189] bridge_slave_0: left allmulticast mode [ 550.099243][T15189] bridge_slave_0: left promiscuous mode [ 550.104865][T15189] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.113007][T31506] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 550.142791][T31620] loop6: detected capacity change from 0 to 8192 [ 550.168302][T31620] loop6: p1 p2 < > p3 p4 < p5 > [ 550.173367][T31620] loop6: partition table partially beyond EOD, truncated [ 550.180525][T31620] loop6: p1 size 100663296 extends beyond EOD, truncated [ 550.188933][T31620] loop6: p2 start 591104 is beyond EOD, truncated [ 550.195387][T31620] loop6: p3 start 33572980 is beyond EOD, truncated [ 550.202961][T31620] loop6: p5 size 100663296 extends beyond EOD, truncated [ 550.211784][T15189] tipc: Disabling bearer [ 550.262444][T15189] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.275132][T15189] bond_slave_0: left promiscuous mode [ 550.283387][T15189] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.293920][T31627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7737'. [ 550.303394][T15189] bond_slave_1: left promiscuous mode [ 550.315551][T15189] $Hÿ (unregistering): Released all slaves [ 550.368671][T15189] tipc: Left network mode [ 550.373723][T31283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.390692][T31283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.435736][T31283] team0: Port device team_slave_0 added [ 550.445189][T15189] hsr_slave_0: left promiscuous mode [ 550.454596][T15189] hsr_slave_1: left promiscuous mode [ 550.463807][T31639] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 550.482201][T31639] vhci_hcd vhci_hcd.2: invalid port number 96 [ 550.489516][T31639] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 550.499076][T15189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.506513][T15189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.518417][T15189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.525816][T15189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.547384][T15189] veth1_macvtap: left promiscuous mode [ 550.553207][T15189] veth0_macvtap: left promiscuous mode [ 550.558936][T15189] veth1_vlan: left promiscuous mode [ 550.565798][T15189] veth0_vlan: left promiscuous mode [ 550.659780][T15189] team0 (unregistering): Port device team_slave_1 removed [ 550.680278][T15189] team0 (unregistering): Port device team_slave_0 removed [ 550.720408][T31658] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 550.734647][T31283] team0: Port device team_slave_1 added [ 550.745566][T31658] vhci_hcd vhci_hcd.2: invalid port number 96 [ 550.752383][T31658] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 550.776695][T31283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.783817][T31283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.797979][T31665] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 550.809750][T31283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.814919][T31654] loop3: detected capacity change from 0 to 512 [ 550.821152][T31665] vhci_hcd vhci_hcd.2: invalid port number 96 [ 550.831816][T31283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.835443][T31665] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 550.841503][T31283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.882492][T31283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.894105][T31654] EXT4-fs (loop3): orphan cleanup on readonly fs [ 550.901202][T31654] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.7746: bad orphan inode 13 [ 550.918246][T31654] ext4_test_bit(bit=12, block=18) = 1 [ 550.923699][T31654] is_bad_inode(inode)=0 [ 550.927959][T31654] NEXT_ORPHAN(inode)=2130706432 [ 550.932806][T31654] max_ino=32 [ 550.936006][T31654] i_nlink=1 [ 550.950541][T31640] lo speed is unknown, defaulting to 1000 [ 550.967248][T31283] hsr_slave_0: entered promiscuous mode [ 550.980555][T31654] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 550.995732][T31283] hsr_slave_1: entered promiscuous mode [ 551.009196][T31654] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 551.017892][T31283] debugfs: 'hsr0' already exists in 'hsr' [ 551.023618][T31283] Cannot create hsr debugfs directory [ 551.030407][T31640] wg1 speed is unknown, defaulting to 1000 [ 551.081284][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 551.081297][ T29] audit: type=1326 audit(1765124527.437:26027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31681 comm="syz.2.7756" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde43fcf749 code=0x0 [ 551.142141][ T29] audit: type=1400 audit(1765124527.497:26028): avc: denied { shutdown } for pid=31681 comm="syz.2.7756" laddr=fe80::13 lport=58651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 551.150460][T31640] lo speed is unknown, defaulting to 1000 [ 551.197056][T15189] IPVS: stop unused estimator thread 0... [ 551.392569][T31687] loop6: detected capacity change from 0 to 512 [ 551.402329][T31687] EXT4-fs (loop6): orphan cleanup on readonly fs [ 551.409969][T31687] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.7758: bad orphan inode 13 [ 551.420310][T31687] ext4_test_bit(bit=12, block=18) = 1 [ 551.425712][T31687] is_bad_inode(inode)=0 [ 551.430011][T31687] NEXT_ORPHAN(inode)=2130706432 [ 551.434912][T31687] max_ino=32 [ 551.438183][T31687] i_nlink=1 [ 551.442206][T31694] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 551.453210][T31694] vhci_hcd vhci_hcd.2: invalid port number 96 [ 551.459606][T31694] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 551.469000][T31687] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 551.490716][T31687] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 551.504883][T31283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 551.514660][T31283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 551.526907][T31283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 551.528609][T31698] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 551.544680][T31698] vhci_hcd vhci_hcd.2: invalid port number 96 [ 551.551359][T31698] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 551.554236][T31283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 551.608599][T31283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.622789][T31283] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.636366][T15189] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.643468][T15189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.671740][T15189] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.678844][T15189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.783831][T31283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.866254][T31283] veth0_vlan: entered promiscuous mode [ 551.875515][T31283] veth1_vlan: entered promiscuous mode [ 551.901199][T31283] veth0_macvtap: entered promiscuous mode [ 551.909434][T31283] veth1_macvtap: entered promiscuous mode [ 551.923597][T31283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.953528][T31283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.972547][T15189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.988471][T15189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.181778][T15189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.197471][T15189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.225284][T31746] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 552.234868][T31746] vhci_hcd vhci_hcd.2: invalid port number 96 [ 552.246746][T31746] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 552.494691][T31769] loop9: detected capacity change from 0 to 8192 [ 552.509506][T31767] loop6: detected capacity change from 0 to 8192 [ 552.560612][T31767] loop6: p1 p2 < > p3 p4 < p5 > [ 552.565639][T31767] loop6: partition table partially beyond EOD, truncated [ 552.576835][T31766] loop2: detected capacity change from 0 to 512 [ 552.584581][T31776] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 552.593129][T31766] EXT4-fs (loop2): orphan cleanup on readonly fs [ 552.600357][T31766] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7772: bad orphan inode 13 [ 552.610448][ T29] audit: type=1326 audit(1765124528.957:26029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31763 comm="syz.0.7726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 552.634106][ T29] audit: type=1326 audit(1765124528.957:26030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31763 comm="syz.0.7726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 552.643739][T31766] ext4_test_bit(bit=12, block=18) = 1 [ 552.657693][ T29] audit: type=1326 audit(1765124528.957:26031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31763 comm="syz.0.7726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 552.663241][T31766] is_bad_inode(inode)=0 [ 552.686972][ T29] audit: type=1326 audit(1765124528.957:26032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31763 comm="syz.0.7726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 552.690912][T31766] NEXT_ORPHAN(inode)=2130706432 [ 552.690923][T31766] max_ino=32 [ 552.690932][T31766] i_nlink=1 [ 552.725797][ T29] audit: type=1326 audit(1765124528.957:26033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31763 comm="syz.0.7726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 552.740269][T31769] loop9: p1 p2 < > p3 p4 < p5 > [ 552.749721][ T29] audit: type=1326 audit(1765124528.957:26034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31763 comm="syz.0.7726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 552.754373][T31769] loop9: partition table partially beyond EOD, truncated [ 552.794260][T31766] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 552.806797][T31767] loop6: p1 size 100663296 extends beyond EOD, truncated [ 552.810806][T31776] vhci_hcd vhci_hcd.2: invalid port number 96 [ 552.814748][T31767] loop6: p2 start 591104 is beyond EOD, truncated [ 552.820974][T31776] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 552.826610][T31767] loop6: p3 start 33572980 is beyond EOD, truncated [ 552.840597][T31766] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 552.842498][T31767] loop6: p5 size 100663296 extends beyond EOD, truncated [ 552.862092][T31769] loop9: p1 size 100663296 extends beyond EOD, truncated [ 552.877909][T31769] loop9: p2 start 591104 is beyond EOD, truncated [ 552.884360][T31769] loop9: p3 start 33572980 is beyond EOD, truncated [ 552.892087][T31769] loop9: p5 size 100663296 extends beyond EOD, truncated [ 553.132543][T31790] EXT4-fs: Ignoring removed i_version option [ 553.200986][T31790] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.286491][T31799] EXT4-fs: Ignoring removed i_version option [ 553.356501][T31799] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.398575][T31801] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 553.428664][T31801] vhci_hcd vhci_hcd.2: invalid port number 96 [ 553.434983][T31801] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 553.529303][ T29] audit: type=1400 audit(1765124529.887:26035): avc: denied { remove_name } for pid=20339 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 553.552838][ T29] audit: type=1400 audit(1765124529.887:26036): avc: denied { rmdir } for pid=20339 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 553.700361][T31806] cgroup: fork rejected by pids controller in /syz2 [ 554.431456][T32703] gretap1: entered promiscuous mode [ 554.469295][T32698] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.511154][T32698] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.532994][T32710] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 554.541476][T32710] vhci_hcd vhci_hcd.2: invalid port number 96 [ 554.547915][T32710] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 554.559267][T32711] set_capacity_and_notify: 2 callbacks suppressed [ 554.559282][T32711] loop6: detected capacity change from 0 to 256 [ 554.589987][T32711] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 554.621344][T32698] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.644452][T32717] __nla_validate_parse: 28 callbacks suppressed [ 554.644469][T32717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7798'. [ 554.659942][T32717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7798'. [ 554.669110][T32717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7798'. [ 554.691648][T32698] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.699891][T32717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7798'. [ 554.710913][T32717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7798'. [ 554.719864][T32717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7798'. [ 554.750991][T32719] loop3: detected capacity change from 0 to 128 [ 554.754137][T32717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7798'. [ 554.766342][T32717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7798'. [ 554.775440][T32717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7798'. [ 554.793046][T15289] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.810367][T15289] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.827737][T15289] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.844564][T15289] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.002395][T32719] syz.3.7799: attempt to access beyond end of device [ 555.002395][T32719] loop3: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 555.039868][T32719] syz.3.7799: attempt to access beyond end of device [ 555.039868][T32719] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 555.075712][T32719] syz.3.7799: attempt to access beyond end of device [ 555.075712][T32719] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 555.115048][T32719] syz.3.7799: attempt to access beyond end of device [ 555.115048][T32719] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 555.153449][T32719] syz.3.7799: attempt to access beyond end of device [ 555.153449][T32719] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 555.192787][T32719] syz.3.7799: attempt to access beyond end of device [ 555.192787][T32719] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 555.227400][T32719] syz.3.7799: attempt to access beyond end of device [ 555.227400][T32719] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 555.258775][T32719] syz.3.7799: attempt to access beyond end of device [ 555.258775][T32719] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 555.281770][T32719] syz.3.7799: attempt to access beyond end of device [ 555.281770][T32719] loop3: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 555.306972][T32719] syz.3.7799: attempt to access beyond end of device [ 555.306972][T32719] loop3: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 555.866499][ T954] loop9: detected capacity change from 0 to 512 [ 555.912794][ T954] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.7810: error while reading EA inode 32 err=-116 [ 555.976237][ T954] EXT4-fs (loop9): Remounting filesystem read-only [ 555.985628][ T954] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 555.997109][ T954] EXT4-fs (loop9): 1 orphan inode deleted [ 556.045701][ T997] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 556.054564][ T997] vhci_hcd vhci_hcd.2: invalid port number 96 [ 556.060910][ T997] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 556.132152][ T986] loop6: detected capacity change from 0 to 512 [ 556.140584][ T986] EXT4-fs (loop6): orphan cleanup on readonly fs [ 556.147405][ T986] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.7811: bad orphan inode 13 [ 556.170227][ T986] ext4_test_bit(bit=12, block=18) = 1 [ 556.175635][ T986] is_bad_inode(inode)=0 [ 556.179915][ T986] NEXT_ORPHAN(inode)=2130706432 [ 556.184755][ T986] max_ino=32 [ 556.187987][ T986] i_nlink=1 [ 556.196498][ T986] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 556.216704][ T986] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 556.483801][ T1147] loop3: detected capacity change from 0 to 512 [ 556.491870][ T1147] EXT4-fs (loop3): orphan cleanup on readonly fs [ 556.501779][ T1147] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.7816: bad orphan inode 13 [ 556.537692][ T1147] ext4_test_bit(bit=12, block=18) = 1 [ 556.543488][ T1147] is_bad_inode(inode)=0 [ 556.547663][ T1147] NEXT_ORPHAN(inode)=2130706432 [ 556.552546][ T1147] max_ino=32 [ 556.555750][ T1147] i_nlink=1 [ 556.579759][ T1147] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 556.599497][ T1147] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 556.782729][ T1188] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 556.791270][ T1188] vhci_hcd vhci_hcd.2: invalid port number 96 [ 556.797727][ T1188] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 556.851658][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 556.851675][ T29] audit: type=1400 audit(1765124533.207:26053): avc: denied { bind } for pid=1192 comm="syz.9.7826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 556.861609][ T1194] xt_CT: You must specify a L4 protocol and not use inversions on it [ 556.942945][ T1194] wireguard5: entered promiscuous mode [ 556.948592][ T1194] wireguard5: entered allmulticast mode [ 557.259367][ T1211] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 557.275490][ T1211] vhci_hcd vhci_hcd.2: invalid port number 96 [ 557.284252][ T1211] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 557.292782][ T1213] netlink: 'syz.3.7835': attribute type 8 has an invalid length. [ 557.300571][ T1213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7835'. [ 557.311961][ T1213] 9p: Unknown uid 00000000004294967295 [ 557.418835][ T1212] loop9: detected capacity change from 0 to 512 [ 557.455855][ T1212] EXT4-fs (loop9): orphan cleanup on readonly fs [ 557.463103][ T1212] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.7833: bad orphan inode 13 [ 557.473810][ T1212] ext4_test_bit(bit=12, block=18) = 1 [ 557.479291][ T1212] is_bad_inode(inode)=0 [ 557.483456][ T1212] NEXT_ORPHAN(inode)=2130706432 [ 557.488351][ T1212] max_ino=32 [ 557.491560][ T1212] i_nlink=1 [ 557.496697][ T1212] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 557.516206][ T29] audit: type=1326 audit(1765124533.847:26054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1235 comm="syz.6.7841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158309f749 code=0x7ffc0000 [ 557.540100][ T29] audit: type=1326 audit(1765124533.847:26055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1235 comm="syz.6.7841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f158309f749 code=0x7ffc0000 [ 557.563655][ T29] audit: type=1326 audit(1765124533.857:26056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1235 comm="syz.6.7841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158309f749 code=0x7ffc0000 [ 557.587167][ T29] audit: type=1326 audit(1765124533.857:26057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1235 comm="syz.6.7841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f158309f749 code=0x7ffc0000 [ 557.610746][ T29] audit: type=1326 audit(1765124533.857:26058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1235 comm="syz.6.7841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158309f749 code=0x7ffc0000 [ 557.634263][ T29] audit: type=1326 audit(1765124533.857:26059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1235 comm="syz.6.7841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f158309f749 code=0x7ffc0000 [ 557.657810][ T29] audit: type=1326 audit(1765124533.857:26060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1235 comm="syz.6.7841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158309f749 code=0x7ffc0000 [ 557.681367][ T29] audit: type=1326 audit(1765124533.857:26061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1235 comm="syz.6.7841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f158309f749 code=0x7ffc0000 [ 557.705073][ T29] audit: type=1326 audit(1765124533.857:26062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1235 comm="syz.6.7841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158309f749 code=0x7ffc0000 [ 557.750291][ T1243] lo speed is unknown, defaulting to 1000 [ 557.756454][ T1243] wg1 speed is unknown, defaulting to 1000 [ 557.819109][ T1243] lo speed is unknown, defaulting to 1000 [ 557.869631][ T1212] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 557.986702][ T1243] siw: device registration error -23 [ 558.652539][ T1296] lo speed is unknown, defaulting to 1000 [ 558.661730][ T1296] wg1 speed is unknown, defaulting to 1000 [ 558.698861][ T1296] lo speed is unknown, defaulting to 1000 [ 558.829363][ T1303] netlink: 'syz.6.7856': attribute type 39 has an invalid length. [ 558.842259][ T1299] siw: device registration error -23 [ 559.085280][ T1324] loop6: detected capacity change from 0 to 2048 [ 559.092007][ T1324] EXT4-fs: Ignoring removed i_version option [ 559.103287][ T1317] program syz.3.7863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 559.114617][ T1324] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.294918][ T1319] loop2: detected capacity change from 0 to 512 [ 559.304373][ T1319] EXT4-fs (loop2): orphan cleanup on readonly fs [ 559.311469][ T1319] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7864: bad orphan inode 13 [ 559.322136][ T1319] ext4_test_bit(bit=12, block=18) = 1 [ 559.327527][ T1319] is_bad_inode(inode)=0 [ 559.331730][ T1319] NEXT_ORPHAN(inode)=2130706432 [ 559.336597][ T1319] max_ino=32 [ 559.339910][ T1319] i_nlink=1 [ 559.344438][ T1319] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 559.358277][ T1319] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 559.464910][ T1542] loop9: detected capacity change from 0 to 2048 [ 559.471874][ T1542] EXT4-fs: Ignoring removed i_version option [ 559.491368][ T1542] ext4 filesystem being mounted at /597/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.870656][ T2013] lo speed is unknown, defaulting to 1000 [ 559.881124][ T2013] wg1 speed is unknown, defaulting to 1000 [ 559.957430][ T2013] lo speed is unknown, defaulting to 1000 [ 560.086411][ T2343] loop2: detected capacity change from 0 to 8192 [ 560.088329][ T2013] chnl_net:caif_netlink_parms(): no params data found [ 560.148420][ T2343] loop2: p1 p2 < > p3 p4 < p5 > [ 560.153423][ T2343] loop2: partition table partially beyond EOD, truncated [ 560.171956][ T2343] loop2: p1 size 100663296 extends beyond EOD, truncated [ 560.199524][ T2343] loop2: p2 start 591104 is beyond EOD, truncated [ 560.205978][ T2343] loop2: p3 start 33572980 is beyond EOD, truncated [ 560.213948][ T2343] loop2: p5 size 100663296 extends beyond EOD, truncated [ 560.236345][ T2013] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.243594][ T2013] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.274724][ T2013] bridge_slave_0: entered allmulticast mode [ 560.282217][ T2013] bridge_slave_0: entered promiscuous mode [ 560.290322][ T2013] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.297397][ T2013] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.304944][ T2013] bridge_slave_1: entered allmulticast mode [ 560.312685][ T2013] bridge_slave_1: entered promiscuous mode [ 560.366216][ T2013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.376639][T21256] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.392642][ T2439] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 560.411640][ T2013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.420078][ T2439] vhci_hcd vhci_hcd.2: invalid port number 96 [ 560.427007][ T2439] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 560.471508][T21256] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.503049][ T2013] team0: Port device team_slave_0 added [ 560.531048][T21256] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.546821][ T2013] team0: Port device team_slave_1 added [ 560.577672][T21256] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.589657][ T2443] loop2: detected capacity change from 0 to 512 [ 560.598713][ T2013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.605708][ T2013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.631657][ T2013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.662404][ T2443] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.7889: error while reading EA inode 32 err=-116 [ 560.663293][ T2013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.678884][ T2443] EXT4-fs (loop2): Remounting filesystem read-only [ 560.682321][ T2013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.682353][ T2013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.733812][ T2443] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 560.740652][ T2013] hsr_slave_0: entered promiscuous mode [ 560.747779][ T2443] EXT4-fs (loop2): 1 orphan inode deleted [ 560.751766][ T2013] hsr_slave_1: entered promiscuous mode [ 560.763323][ T2013] debugfs: 'hsr0' already exists in 'hsr' [ 560.765945][ T2443] EXT4-fs mount: 26 callbacks suppressed [ 560.766051][ T2443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.769100][ T2013] Cannot create hsr debugfs directory [ 560.802371][T21256] bridge_slave_1: left allmulticast mode [ 560.808120][T21256] bridge_slave_1: left promiscuous mode [ 560.813961][T21256] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.826612][T21256] bridge_slave_0: left allmulticast mode [ 560.832436][T21256] bridge_slave_0: left promiscuous mode [ 560.838263][T21256] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.950697][T21256] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.959725][T21256] bond_slave_0: left promiscuous mode [ 560.967360][T21256] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.977279][T21256] bond_slave_1: left promiscuous mode [ 560.990018][T21256] $Hÿ (unregistering): Released all slaves [ 561.034648][ T2604] loop3: detected capacity change from 0 to 256 [ 561.044489][T21256] tipc: Left network mode [ 561.054846][ T2604] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 561.103941][ T2686] loop3: detected capacity change from 0 to 256 [ 561.115551][T21256] hsr_slave_0: left promiscuous mode [ 561.121411][T21256] hsr_slave_1: left promiscuous mode [ 561.127729][T21256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.135362][T21256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.143010][ T2686] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 561.158705][T21256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.166225][T21256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.177839][T21256] veth1_macvtap: left promiscuous mode [ 561.183590][T21256] veth0_macvtap: left promiscuous mode [ 561.190396][T21256] veth1_vlan: left promiscuous mode [ 561.200884][ T2682] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 561.208926][ T2682] FAT-fs (loop3): Filesystem has been set read-only [ 561.212132][T21256] veth0_vlan: left promiscuous mode [ 561.215526][ T2682] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 561.284495][T21256] pim6reg (unregistering): left allmulticast mode [ 561.369468][T21256] team0 (unregistering): Port device team_slave_1 removed [ 561.381682][T21256] team0 (unregistering): Port device team_slave_0 removed [ 561.424361][T31144] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.457284][ T2972] gretap1: entered promiscuous mode [ 561.482123][ T2970] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 561.490521][ T2970] vhci_hcd vhci_hcd.2: invalid port number 96 [ 561.496728][ T2970] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 561.741873][ T2975] loop3: detected capacity change from 0 to 512 [ 561.753375][ T2989] loop6: detected capacity change from 0 to 256 [ 561.757085][ T2975] EXT4-fs (loop3): orphan cleanup on readonly fs [ 561.767084][ T2975] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.7902: bad orphan inode 13 [ 561.780072][ T2975] ext4_test_bit(bit=12, block=18) = 1 [ 561.785468][ T2975] is_bad_inode(inode)=0 [ 561.789854][ T2975] NEXT_ORPHAN(inode)=2130706432 [ 561.794706][ T2975] max_ino=32 [ 561.797703][ T2989] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 561.797933][ T2975] i_nlink=1 [ 561.812135][ T2975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 561.827078][ T2975] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 561.866331][ T2013] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 561.875340][ T2975] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 561.900446][ T2013] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 561.908237][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 561.908251][ T29] audit: type=1326 audit(1765124538.267:26190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2982 comm="syz.0.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 561.938868][ T29] audit: type=1326 audit(1765124538.297:26191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2982 comm="syz.0.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 561.940363][ T2013] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 561.963358][ T29] audit: type=1326 audit(1765124538.327:26192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2982 comm="syz.0.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 562.033334][ T2013] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 562.034607][ T2995] loop6: detected capacity change from 0 to 2048 [ 562.048146][ T2995] EXT4-fs: Ignoring removed i_version option [ 562.056208][ T29] audit: type=1326 audit(1765124538.377:26193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2982 comm="syz.0.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 562.079797][ T29] audit: type=1326 audit(1765124538.377:26194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2982 comm="syz.0.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 562.103349][ T29] audit: type=1326 audit(1765124538.377:26195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2982 comm="syz.0.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 562.130161][ T2995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.144049][ T2995] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.264006][ T2013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.281086][ T2013] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.294974][T15189] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.302128][T15189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.316745][T15282] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.323821][T15282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.414750][ T2013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.442710][T20339] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.452986][T23175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.499634][ T29] audit: type=1326 audit(1765124538.847:26196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.6.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158309f749 code=0x7ffc0000 [ 562.523254][ T29] audit: type=1326 audit(1765124538.847:26197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.6.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f158309f749 code=0x7ffc0000 [ 562.546803][ T29] audit: type=1326 audit(1765124538.847:26198): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.6.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158309f749 code=0x7ffc0000 [ 562.570783][ T29] audit: type=1326 audit(1765124538.847:26199): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3017 comm="syz.6.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f158309f749 code=0x7ffc0000 [ 562.572858][ T3013] loop2: detected capacity change from 0 to 512 [ 562.609791][ T3020] lo speed is unknown, defaulting to 1000 [ 562.615745][ T3020] wg1 speed is unknown, defaulting to 1000 [ 562.650394][ T3013] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.7909: error while reading EA inode 32 err=-116 [ 562.668444][ T3020] lo speed is unknown, defaulting to 1000 [ 562.674613][ T3013] EXT4-fs (loop2): Remounting filesystem read-only [ 562.702828][ T3013] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 562.720651][ T3013] EXT4-fs (loop2): 1 orphan inode deleted [ 562.725490][ T3032] siw: device registration error -23 [ 562.743546][ T3013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.748069][ T3032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7914'. [ 562.826540][ T2013] veth0_vlan: entered promiscuous mode [ 562.842570][ T2013] veth1_vlan: entered promiscuous mode [ 562.859519][ T2013] veth0_macvtap: entered promiscuous mode [ 562.882832][ T2013] veth1_macvtap: entered promiscuous mode [ 562.915318][ T2013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.929587][ T2013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.943228][T15204] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.960571][T15204] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.036293][T15204] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.068063][T15204] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.099400][ T3299] loop9: detected capacity change from 0 to 2048 [ 563.106239][ T3299] EXT4-fs: Ignoring removed i_version option [ 563.130482][ T3299] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.144465][ T3299] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.188892][ T2013] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.350471][T31144] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.589724][ T3651] loop2: detected capacity change from 0 to 512 [ 563.599207][ T3651] EXT4-fs (loop2): orphan cleanup on readonly fs [ 563.606421][ T3651] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7920: bad orphan inode 13 [ 563.627855][ T3651] ext4_test_bit(bit=12, block=18) = 1 [ 563.633283][ T3651] is_bad_inode(inode)=0 [ 563.637509][ T3651] NEXT_ORPHAN(inode)=2130706432 [ 563.642440][ T3651] max_ino=32 [ 563.645705][ T3651] i_nlink=1 [ 563.650674][ T3651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 563.665283][ T3651] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 563.678726][ T3651] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 563.815822][ T3666] siw: device registration error -23 [ 563.823104][ T3666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7924'. [ 564.034612][ T3674] lo speed is unknown, defaulting to 1000 [ 564.040993][ T3674] wg1 speed is unknown, defaulting to 1000 [ 564.092060][ T3674] lo speed is unknown, defaulting to 1000 [ 564.104267][ T3679] siw: device registration error -23 [ 564.217560][ T3684] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 564.229856][T31144] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.278932][ T3687] lo speed is unknown, defaulting to 1000 [ 564.293072][ T3688] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 564.301172][ T3688] FAT-fs (loop3): Filesystem has been set read-only [ 564.318645][ T3687] wg1 speed is unknown, defaulting to 1000 [ 564.329679][ T3688] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 564.378172][ T3686] loop2: p1 p2 < > p3 p4 < p5 > [ 564.383239][ T3686] loop2: partition table partially beyond EOD, truncated [ 564.383893][ T3687] lo speed is unknown, defaulting to 1000 [ 564.391258][ T3686] loop2: p1 size 100663296 extends beyond EOD, truncated [ 564.418196][ T3686] loop2: p2 start 591104 is beyond EOD, truncated [ 564.424712][ T3686] loop2: p3 start 33572980 is beyond EOD, truncated [ 564.440306][ T3686] loop2: p5 size 100663296 extends beyond EOD, truncated [ 564.454215][ T3694] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7934'. [ 564.463425][ T3694] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7934'. [ 564.472463][ T3694] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7934'. [ 564.501006][ T3694] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7934'. [ 564.510124][ T3694] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7934'. [ 564.519165][ T3694] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7934'. [ 564.543316][ T3694] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7934'. [ 564.552642][ T3694] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7934'. [ 564.586677][ T3702] EXT4-fs: Ignoring removed i_version option [ 564.609537][ T3702] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.611628][ T3704] siw: device registration error -23 [ 564.622239][ T3702] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.694961][ T3708] EXT4-fs: Ignoring removed i_version option [ 564.725184][ T3708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.740709][ T3708] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.819737][T31144] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.843298][ T2013] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.874013][ T3717] EXT4-fs: Ignoring removed i_version option [ 564.904770][ T3717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.917159][ T3717] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.019789][T31144] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.786441][ T4711] set_capacity_and_notify: 5 callbacks suppressed [ 565.786456][ T4711] loop9: detected capacity change from 0 to 8192 [ 565.838341][ T4711] loop9: p1 p2 < > p3 p4 < p5 > [ 565.843566][ T4711] loop9: partition table partially beyond EOD, truncated [ 565.853449][ T4716] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.864549][ T4711] loop9: p1 size 100663296 extends beyond EOD, truncated [ 565.872877][ T4711] loop9: p2 start 591104 is beyond EOD, truncated [ 565.879578][ T4711] loop9: p3 start 33572980 is beyond EOD, truncated [ 565.887013][ T4711] loop9: p5 size 100663296 extends beyond EOD, truncated [ 565.897493][ T4719] loop3: detected capacity change from 0 to 256 [ 565.914780][ T4719] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 565.929041][ T4721] siw: device registration error -23 [ 565.942459][ T4716] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.978529][ T4725] loop2: detected capacity change from 0 to 1024 [ 565.985065][ T4725] EXT4-fs: Ignoring removed orlov option [ 565.993178][ T4725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.006211][ T4725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.021363][ T4716] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.083391][ T4716] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.172056][T21256] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.192202][ T4734] lo speed is unknown, defaulting to 1000 [ 566.205276][T21256] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.228778][ T4734] wg1 speed is unknown, defaulting to 1000 [ 566.237864][T21273] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.247450][T21273] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.257226][ T4737] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.309741][ T4742] loop6: detected capacity change from 0 to 256 [ 566.321633][ T4737] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.349187][ T4742] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 566.360854][ T4734] lo speed is unknown, defaulting to 1000 [ 566.414633][ T4737] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.449353][ T4748] loop3: detected capacity change from 0 to 2048 [ 566.456092][ T4748] EXT4-fs: Ignoring removed i_version option [ 566.490784][ T4737] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.520178][ T4748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.532546][ T4748] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.559475][T21273] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.602547][T21273] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.645740][T21273] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.663806][T21273] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.676056][ T4759] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 566.684480][ T4759] vhci_hcd vhci_hcd.2: invalid port number 96 [ 566.690787][ T4759] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 566.747347][ T4761] lo speed is unknown, defaulting to 1000 [ 566.754183][ T4761] wg1 speed is unknown, defaulting to 1000 [ 566.794165][ T4761] lo speed is unknown, defaulting to 1000 [ 566.845494][ T4762] siw: device registration error -23 [ 566.938853][T23175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.969753][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 566.969768][ T29] audit: type=1326 audit(1765124543.327:26254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.2.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde43fcf749 code=0x7ffc0000 [ 567.023429][ T29] audit: type=1326 audit(1765124543.357:26255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.2.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde43fcf749 code=0x7ffc0000 [ 567.047180][ T29] audit: type=1326 audit(1765124543.357:26256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.2.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde43fcf749 code=0x7ffc0000 [ 567.070909][ T29] audit: type=1326 audit(1765124543.357:26257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.2.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde43fcf749 code=0x7ffc0000 [ 567.094503][ T29] audit: type=1326 audit(1765124543.357:26258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.2.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde43fcf749 code=0x7ffc0000 [ 567.118089][ T29] audit: type=1326 audit(1765124543.357:26259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.2.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde43fcf749 code=0x7ffc0000 [ 567.141950][ T29] audit: type=1326 audit(1765124543.357:26260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.2.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde43fcf749 code=0x7ffc0000 [ 567.165519][ T29] audit: type=1326 audit(1765124543.357:26261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.2.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde43fcf749 code=0x7ffc0000 [ 567.189018][ T29] audit: type=1326 audit(1765124543.357:26262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.2.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde43fcf749 code=0x7ffc0000 [ 567.212673][ T29] audit: type=1326 audit(1765124543.357:26263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4777 comm="syz.2.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde43fcf749 code=0x7ffc0000 [ 567.334659][ T4790] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 567.343953][ T4790] vhci_hcd vhci_hcd.2: invalid port number 96 [ 567.352622][ T4790] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 567.470367][ T4870] loop2: detected capacity change from 0 to 2048 [ 567.480319][ T4918] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 567.490731][ T4918] vhci_hcd vhci_hcd.2: invalid port number 96 [ 567.497134][ T4918] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 567.506062][ T4870] EXT4-fs: Ignoring removed i_version option [ 567.526565][ T4870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.561704][ T4870] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.665283][ T5089] program syz.3.7970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 567.757716][ T5375] lo speed is unknown, defaulting to 1000 [ 567.764497][ T5375] wg1 speed is unknown, defaulting to 1000 [ 567.871072][ T5440] loop9: detected capacity change from 0 to 8192 [ 567.879087][ T5440] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 567.905259][ T5497] lo speed is unknown, defaulting to 1000 [ 567.913018][ T5375] lo speed is unknown, defaulting to 1000 [ 567.920968][ T5497] wg1 speed is unknown, defaulting to 1000 [ 567.970857][T31144] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.045222][ T5594] loop2: detected capacity change from 0 to 1024 [ 568.058107][ T5594] EXT4-fs: Ignoring removed orlov option [ 568.059974][ T5497] lo speed is unknown, defaulting to 1000 [ 568.075611][ T5594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.088785][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.178175][ T5630] loop0: detected capacity change from 128 to 0 [ 568.328597][ T5635] loop6: detected capacity change from 0 to 8192 [ 568.378199][ T5635] loop6: p1 p2 < > p3 p4 < p5 > [ 568.383184][ T5635] loop6: partition table partially beyond EOD, truncated [ 568.399352][ T5635] loop6: p1 size 100663296 extends beyond EOD, truncated [ 568.409299][ T5640] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 568.429157][ T5635] loop6: p2 start 591104 is beyond EOD, truncated [ 568.434976][ T5640] vhci_hcd vhci_hcd.2: invalid port number 96 [ 568.435738][ T5635] loop6: p3 start 33572980 is beyond EOD, truncated [ 568.449241][ T5640] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 568.464677][ T5635] loop6: p5 size 100663296 extends beyond EOD, truncated [ 568.827478][ T5712] lo speed is unknown, defaulting to 1000 [ 568.846501][ T5712] wg1 speed is unknown, defaulting to 1000 [ 569.013809][ T5712] lo speed is unknown, defaulting to 1000 [ 569.030350][ T5829] siw: device registration error -23 [ 569.171714][ T6364] lo speed is unknown, defaulting to 1000 [ 569.179149][ T6364] wg1 speed is unknown, defaulting to 1000 [ 569.230184][ T6364] lo speed is unknown, defaulting to 1000 [ 569.256358][ T6429] siw: device registration error -23 [ 569.562598][ T6952] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 569.579092][ T6952] vhci_hcd vhci_hcd.2: invalid port number 96 [ 569.585660][ T6952] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 569.866720][ T7345] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 569.890841][ T7439] program syz.2.7995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.927466][ T7345] vhci_hcd vhci_hcd.2: invalid port number 96 [ 569.936119][ T7345] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 570.149648][ T8061] __nla_validate_parse: 21 callbacks suppressed [ 570.149665][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7998'. [ 570.164996][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7998'. [ 570.174025][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7998'. [ 570.174883][ T8025] EXT4-fs: Ignoring removed orlov option [ 570.212260][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7998'. [ 570.221295][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7998'. [ 570.230372][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7998'. [ 570.239914][ T8025] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.255522][ T8025] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.304004][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7998'. [ 570.313233][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7998'. [ 570.322278][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7998'. [ 570.391660][ T8262] EXT4-fs: Ignoring removed i_version option [ 570.409678][ T8262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.437595][ T8262] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.590261][T20339] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.649773][ T8360] loop3: p1 p2 < > p3 p4 < p5 > [ 570.654863][ T8360] loop3: partition table partially beyond EOD, truncated [ 570.665650][ T8360] loop3: p1 size 100663296 extends beyond EOD, truncated [ 570.681520][ T8360] loop3: p2 start 591104 is beyond EOD, truncated [ 570.688076][ T8360] loop3: p3 start 33572980 is beyond EOD, truncated [ 570.718417][ T8360] loop3: p5 size 100663296 extends beyond EOD, truncated [ 571.034980][ T8826] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 571.050452][ T8826] vhci_hcd vhci_hcd.2: invalid port number 96 [ 571.057371][ T8826] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 571.869425][ T9818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8010'. [ 571.946264][ T9920] program syz.6.8011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 572.081615][ T9963] set_capacity_and_notify: 3 callbacks suppressed [ 572.081634][ T9963] loop9: detected capacity change from 0 to 8192 [ 572.116559][T10003] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 572.125198][T10003] vhci_hcd vhci_hcd.2: invalid port number 96 [ 572.131670][T10003] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 572.141702][ T9963] loop9: p1 p2 < > p3 p4 < p5 > [ 572.146682][ T9963] loop9: partition table partially beyond EOD, truncated [ 572.191457][ T9963] loop9: p1 size 100663296 extends beyond EOD, truncated [ 572.210446][ T9963] loop9: p2 start 591104 is beyond EOD, truncated [ 572.217053][ T9963] loop9: p3 start 33572980 is beyond EOD, truncated [ 572.238481][ T9963] loop9: p5 size 100663296 extends beyond EOD, truncated [ 572.332610][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 572.332623][ T29] audit: type=1326 audit(1765124548.687:26295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.0.8018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 572.415872][ T29] audit: type=1326 audit(1765124548.717:26296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.0.8018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 572.439522][ T29] audit: type=1326 audit(1765124548.717:26297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.0.8018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 572.463225][ T29] audit: type=1326 audit(1765124548.717:26298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.0.8018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 572.486820][ T29] audit: type=1326 audit(1765124548.717:26299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.0.8018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 572.510442][ T29] audit: type=1326 audit(1765124548.717:26300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10025 comm="syz.0.8018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1061f749 code=0x7ffc0000 [ 572.629515][T10109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.650529][T10127] loop9: detected capacity change from 0 to 2048 [ 572.658434][T10127] EXT4-fs: Ignoring removed i_version option [ 572.671175][T10127] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.683858][T10127] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.698661][T10150] loop2: detected capacity change from 0 to 256 [ 572.708316][T10109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.728587][T10150] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 572.777830][ T29] audit: type=1326 audit(1765124549.107:26301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10108 comm="syz.2.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde43fcf749 code=0x7ffc0000 [ 572.801684][ T29] audit: type=1326 audit(1765124549.107:26302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10108 comm="syz.2.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fde43fcf749 code=0x7ffc0000 [ 572.825265][ T29] audit: type=1326 audit(1765124549.107:26303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10108 comm="syz.2.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde43fcf749 code=0x7ffc0000 [ 572.848917][ T29] audit: type=1326 audit(1765124549.107:26304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10108 comm="syz.2.8021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fde43fcf749 code=0x7ffc0000 [ 572.876476][T10109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.909452][ T2013] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.034126][T10109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.105977][T15289] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.121876][T15289] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.133797][T15289] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.151180][T15289] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.165365][T10531] program syz.6.8027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 573.477484][T10561] loop2: detected capacity change from 0 to 512 [ 573.516167][T10561] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.8032: error while reading EA inode 32 err=-116 [ 573.532414][T10561] EXT4-fs (loop2): Remounting filesystem read-only [ 573.539302][T10561] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 573.549986][T10561] EXT4-fs (loop2): 1 orphan inode deleted [ 573.563094][T10561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.077296][T11378] netlink: 'syz.3.8036': attribute type 39 has an invalid length. [ 574.370387][T11719] lo speed is unknown, defaulting to 1000 [ 574.418265][T11719] wg1 speed is unknown, defaulting to 1000 [ 574.502409][T31144] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.514594][T11719] lo speed is unknown, defaulting to 1000 [ 574.724350][T12258] lo speed is unknown, defaulting to 1000 [ 574.775307][T12258] wg1 speed is unknown, defaulting to 1000 [ 574.946568][T12258] lo speed is unknown, defaulting to 1000 [ 574.953918][T12157] siw: device registration error -23 [ 575.099377][T12563] program syz.9.8048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.298889][T12871] __nla_validate_parse: 26 callbacks suppressed [ 575.298907][T12871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8052'. [ 575.314264][T12871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8052'. [ 575.323343][T12871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8052'. [ 575.383798][T12883] loop3: detected capacity change from 0 to 512 [ 575.458485][T12871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8052'. [ 575.467533][T12871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8052'. [ 575.476537][T12871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8052'. [ 575.504162][T12883] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.8049: error while reading EA inode 32 err=-116 [ 575.547541][T12883] EXT4-fs (loop3): Remounting filesystem read-only [ 575.563921][T12871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8052'. [ 575.573016][T12871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8052'. [ 575.582006][T12871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8052'. [ 575.594711][T12883] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 575.609993][T13107] loop6: detected capacity change from 0 to 8192 [ 575.616697][T12883] EXT4-fs (loop3): 1 orphan inode deleted [ 575.627491][T13107] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 575.669309][T12883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.204591][T23175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.269247][T13692] lo speed is unknown, defaulting to 1000 [ 576.288185][T13692] wg1 speed is unknown, defaulting to 1000 [ 576.305486][T13784] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8062'. [ 576.317703][T13779] program syz.3.8061 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 576.396830][T13692] lo speed is unknown, defaulting to 1000 [ 576.454192][T13862] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 576.463626][T13862] vhci_hcd vhci_hcd.2: invalid port number 96 [ 576.470813][T13862] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 576.535640][T14031] loop3: detected capacity change from 0 to 256 [ 576.543454][T14031] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 577.044744][T14436] loop9: detected capacity change from 0 to 256 [ 577.053676][T14436] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 577.142839][T14423] loop3: detected capacity change from 0 to 512 [ 577.151925][T14423] EXT4-fs (loop3): orphan cleanup on readonly fs [ 577.158738][T14423] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.8071: bad orphan inode 13 [ 577.169053][T14423] ext4_test_bit(bit=12, block=18) = 1 [ 577.174451][T14423] is_bad_inode(inode)=0 [ 577.178690][T14423] NEXT_ORPHAN(inode)=2130706432 [ 577.183598][T14423] max_ino=32 [ 577.186819][T14423] i_nlink=1 [ 577.200281][T14423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 577.237895][T14423] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 577.268579][T14423] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 577.321509][T14452] loop9: detected capacity change from 0 to 8192 [ 577.329709][T14452] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 577.407254][T14455] loop9: detected capacity change from 0 to 2048 [ 577.414215][T14455] EXT4-fs: Ignoring removed i_version option [ 577.431975][T14455] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.444739][T14455] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.597110][ T2013] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.641909][T14462] siw: device registration error -23 [ 577.793055][T23175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.983685][T14472] lo speed is unknown, defaulting to 1000 [ 577.996345][T14472] wg1 speed is unknown, defaulting to 1000 [ 578.047231][T14472] lo speed is unknown, defaulting to 1000 [ 578.211982][T14476] loop6: detected capacity change from 0 to 8192 [ 578.221722][T14478] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 578.229493][T14478] vhci_hcd vhci_hcd.2: invalid port number 96 [ 578.235976][T14478] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 578.268120][T14476] loop6: p1 p2 < > p3 p4 < p5 > [ 578.273194][T14476] loop6: partition table partially beyond EOD, truncated [ 578.280311][T14476] loop6: p1 size 100663296 extends beyond EOD, truncated [ 578.289277][T14476] loop6: p2 start 591104 is beyond EOD, truncated [ 578.295713][T14476] loop6: p3 start 33572980 is beyond EOD, truncated [ 578.303012][T14476] loop6: p5 size 100663296 extends beyond EOD, truncated [ 578.466436][T14490] loop6: detected capacity change from 0 to 2048 [ 578.481124][T14490] EXT4-fs: Ignoring removed i_version option [ 578.509171][T14490] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.536865][T14490] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.819112][T20339] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.265113][T14514] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 579.273843][T14514] vhci_hcd vhci_hcd.2: invalid port number 96 [ 579.281932][T14514] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 579.430597][T14523] loop9: detected capacity change from 0 to 8192 [ 579.458812][T14523] loop9: p1 p2 < > p3 p4 < p5 > [ 579.463834][T14523] loop9: partition table partially beyond EOD, truncated [ 579.471648][T14523] loop9: p1 size 100663296 extends beyond EOD, truncated [ 579.479450][T14523] loop9: p2 start 591104 is beyond EOD, truncated [ 579.485910][T14523] loop9: p3 start 33572980 is beyond EOD, truncated [ 579.493478][T14523] loop9: p5 size 100663296 extends beyond EOD, truncated [ 579.714814][T14538] lo speed is unknown, defaulting to 1000 [ 579.721575][T14538] wg1 speed is unknown, defaulting to 1000 [ 579.758033][T14538] lo speed is unknown, defaulting to 1000 [ 580.070905][T14546] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 580.078526][T14546] vhci_hcd vhci_hcd.2: invalid port number 96 [ 580.084781][T14546] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 580.705646][T14565] loop9: detected capacity change from 0 to 8192 [ 580.748191][T14565] loop9: p1 p2 < > p3 p4 < p5 > [ 580.753189][T14565] loop9: partition table partially beyond EOD, truncated [ 580.760901][T14565] loop9: p1 size 100663296 extends beyond EOD, truncated [ 580.769788][T14565] loop9: p2 start 591104 is beyond EOD, truncated [ 580.776262][T14565] loop9: p3 start 33572980 is beyond EOD, truncated [ 580.786896][T14565] loop9: p5 size 100663296 extends beyond EOD, truncated [ 580.963171][T14570] loop9: detected capacity change from 0 to 2048 [ 580.977075][T14570] EXT4-fs: Ignoring removed i_version option [ 581.012502][T14570] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.024873][T14570] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.053789][T14576] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 581.101971][T14576] vhci_hcd vhci_hcd.2: invalid port number 96 [ 581.108470][T14576] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 581.188234][ T2013] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.353564][T14594] lo speed is unknown, defaulting to 1000 [ 581.359786][T14594] wg1 speed is unknown, defaulting to 1000 [ 581.423976][T14594] lo speed is unknown, defaulting to 1000 [ 582.042780][T14603] loop2: detected capacity change from 0 to 8192 [ 582.100325][T14603] loop2: p1 p2 < > p3 p4 < p5 > [ 582.105405][T14603] loop2: partition table partially beyond EOD, truncated [ 582.113035][T14603] loop2: p1 size 100663296 extends beyond EOD, truncated [ 582.121189][T14603] loop2: p2 start 591104 is beyond EOD, truncated [ 582.127436][T14607] gretap1: entered promiscuous mode [ 582.127662][T14603] loop2: p3 start 33572980 is beyond EOD, truncated [ 582.140369][T14603] loop2: p5 size 100663296 extends beyond EOD, truncated [ 582.435506][T14617] loop3: detected capacity change from 0 to 2048 [ 582.449799][T14620] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 582.459904][T14620] vhci_hcd vhci_hcd.2: invalid port number 96 [ 582.466291][T14620] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 582.477726][T14617] EXT4-fs: Ignoring removed i_version option [ 582.539091][T14617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.586337][T14617] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 582.989835][T23175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.075109][T14645] lo speed is unknown, defaulting to 1000 [ 583.077117][T14643] loop3: detected capacity change from 0 to 8192 [ 583.081330][T14645] wg1 speed is unknown, defaulting to 1000 [ 583.108124][T14643] loop3: p1 p2 < > p3 p4 < p5 > [ 583.113187][T14643] loop3: partition table partially beyond EOD, truncated [ 583.122505][T14643] loop3: p1 size 100663296 extends beyond EOD, truncated [ 583.135875][T14645] lo speed is unknown, defaulting to 1000 [ 583.142263][T14643] loop3: p2 start 591104 is beyond EOD, truncated [ 583.148859][T14643] loop3: p3 start 33572980 is beyond EOD, truncated [ 583.160832][T14643] loop3: p5 size 100663296 extends beyond EOD, truncated [ 583.193817][T14646] lo speed is unknown, defaulting to 1000 [ 583.205674][T14646] wg1 speed is unknown, defaulting to 1000 [ 583.242873][T14646] lo speed is unknown, defaulting to 1000 [ 583.249456][T14651] siw: device registration error -23 [ 583.422096][T14662] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 583.430001][T14662] vhci_hcd vhci_hcd.2: invalid port number 96 [ 583.436188][T14662] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 583.895557][T14680] loop6: detected capacity change from 0 to 2048 [ 583.908421][T14680] EXT4-fs: Ignoring removed i_version option [ 583.924346][T14678] loop9: detected capacity change from 0 to 8192 [ 583.932255][T14680] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.944703][T14680] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.967999][T14674] loop2: detected capacity change from 0 to 512 [ 583.976682][T14674] EXT4-fs (loop2): orphan cleanup on readonly fs [ 583.978204][T14678] loop9: p1 p2 < > p3 p4 < p5 > [ 583.988056][T14678] loop9: partition table partially beyond EOD, truncated [ 583.995177][T14678] loop9: p1 size 100663296 extends beyond EOD, truncated [ 584.002792][T14678] loop9: p2 start 591104 is beyond EOD, truncated [ 584.009286][T14678] loop9: p3 start 33572980 is beyond EOD, truncated [ 584.017651][T14678] loop9: p5 size 100663296 extends beyond EOD, truncated [ 584.035983][T14674] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.8161: bad orphan inode 13 [ 584.056517][T14674] ext4_test_bit(bit=12, block=18) = 1 [ 584.062014][T14674] is_bad_inode(inode)=0 [ 584.066167][T14674] NEXT_ORPHAN(inode)=2130706432 [ 584.071043][T14674] max_ino=32 [ 584.074242][T14674] i_nlink=1 [ 584.091355][T14674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 584.118549][T14674] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 584.158926][T14674] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 584.217078][T20339] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.293589][T14698] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 584.301829][T14698] vhci_hcd vhci_hcd.2: invalid port number 96 [ 584.308426][T14698] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 584.648038][T14712] lo speed is unknown, defaulting to 1000 [ 584.654160][T14712] wg1 speed is unknown, defaulting to 1000 [ 584.695010][T14712] lo speed is unknown, defaulting to 1000 [ 584.707477][T31144] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.056958][T14719] lo speed is unknown, defaulting to 1000 [ 585.063357][T14719] wg1 speed is unknown, defaulting to 1000 [ 585.100697][T14719] lo speed is unknown, defaulting to 1000 [ 585.115901][T14724] siw: device registration error -23 [ 585.196595][T14732] loop9: detected capacity change from 0 to 2048 [ 585.203331][T14732] EXT4-fs: Ignoring removed i_version option [ 585.219102][T14732] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.231579][T14732] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.391071][ T2013] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.449450][T14736] loop9: detected capacity change from 0 to 8192 [ 585.464365][T14738] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 585.472212][T14738] vhci_hcd vhci_hcd.2: invalid port number 96 [ 585.478438][T14738] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 585.498731][T14736] loop9: p1 p2 < > p3 p4 < p5 > [ 585.503790][T14736] loop9: partition table partially beyond EOD, truncated [ 585.511008][T14736] loop9: p1 size 100663296 extends beyond EOD, truncated [ 585.518817][T14736] loop9: p2 start 591104 is beyond EOD, truncated [ 585.525271][T14736] loop9: p3 start 33572980 is beyond EOD, truncated [ 585.532917][T14736] loop9: p5 size 100663296 extends beyond EOD, truncated [ 585.992379][T14760] lo speed is unknown, defaulting to 1000 [ 585.999183][T14760] wg1 speed is unknown, defaulting to 1000 [ 586.044119][T14760] lo speed is unknown, defaulting to 1000 [ 586.065636][T14767] loop2: detected capacity change from 0 to 2048 [ 586.075503][T14767] EXT4-fs: Ignoring removed i_version option [ 586.089055][T14765] siw: device registration error -23 [ 586.111269][T14767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.129949][T14767] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.223541][T14773] lo speed is unknown, defaulting to 1000 [ 586.231026][T14773] wg1 speed is unknown, defaulting to 1000 [ 586.296523][T14773] lo speed is unknown, defaulting to 1000 [ 586.370026][T31144] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.431229][T14780] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 586.439331][T14780] vhci_hcd vhci_hcd.2: invalid port number 96 [ 586.445978][T14780] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 586.510922][T14784] loop2: detected capacity change from 0 to 8192 [ 586.530638][T14784] loop2: p1 p2 < > p3 p4 < p5 > [ 586.535603][T14784] loop2: partition table partially beyond EOD, truncated [ 586.542873][T14784] loop2: p1 size 100663296 extends beyond EOD, truncated [ 586.552866][T14784] loop2: p2 start 591104 is beyond EOD, truncated [ 586.559391][T14784] loop2: p3 start 33572980 is beyond EOD, truncated [ 586.587518][T14784] loop2: p5 size 100663296 extends beyond EOD, truncated [ 586.950699][T14803] lo speed is unknown, defaulting to 1000 [ 586.956969][T14803] wg1 speed is unknown, defaulting to 1000 [ 586.991302][T14803] lo speed is unknown, defaulting to 1000 [ 587.342565][T14817] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 587.351146][T14817] vhci_hcd vhci_hcd.2: invalid port number 96 [ 587.357455][T14817] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 587.624846][T14825] loop2: detected capacity change from 0 to 8192 [ 587.677991][T14825] loop2: p1 p2 < > p3 p4 < p5 > [ 587.683124][T14825] loop2: partition table partially beyond EOD, truncated [ 587.690653][T14825] loop2: p1 size 100663296 extends beyond EOD, truncated [ 587.699731][T14825] loop2: p2 start 591104 is beyond EOD, truncated [ 587.706275][T14825] loop2: p3 start 33572980 is beyond EOD, truncated [ 587.718717][T14825] loop2: p5 size 100663296 extends beyond EOD, truncated [ 587.942301][T14838] lo speed is unknown, defaulting to 1000 [ 587.948817][T14838] wg1 speed is unknown, defaulting to 1000 [ 587.993473][T14838] lo speed is unknown, defaulting to 1000 [ 588.018651][T14843] lo speed is unknown, defaulting to 1000 [ 588.054689][T14843] wg1 speed is unknown, defaulting to 1000 [ 588.094742][T14843] lo speed is unknown, defaulting to 1000 [ 588.101435][T14844] siw: device registration error -23 [ 588.174248][T14850] loop9: detected capacity change from 0 to 2048 [ 588.181333][T14850] EXT4-fs: Ignoring removed i_version option [ 588.199174][T14850] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.211405][T14850] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.372211][ T2013] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.596023][T14858] loop9: detected capacity change from 0 to 512 [ 588.603791][T14858] EXT4-fs (loop9): orphan cleanup on readonly fs [ 588.610551][T14858] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.8221: bad orphan inode 13 [ 588.620721][T14858] ext4_test_bit(bit=12, block=18) = 1 [ 588.626146][T14858] is_bad_inode(inode)=0 [ 588.630316][T14858] NEXT_ORPHAN(inode)=2130706432 [ 588.635253][T14858] max_ino=32 [ 588.638477][T14858] i_nlink=1 [ 588.641947][T14858] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 588.655076][T14858] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 588.668183][T14858] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 588.779236][T14867] __nla_validate_parse: 1 callbacks suppressed [ 588.779254][T14867] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8224'. [ 589.027913][T15099] loop2: detected capacity change from 0 to 256 [ 589.035289][T15099] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 589.190732][ T2013] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.241031][T15433] loop9: detected capacity change from 0 to 1024 [ 589.252284][T15433] EXT4-fs: Ignoring removed orlov option [ 589.264053][T15433] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.444833][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 589.444852][ T29] audit: type=1326 audit(1765124565.737:26356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15428 comm="syz.9.8228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f29dcf749 code=0x7ffc0000 [ 589.474816][ T29] audit: type=1326 audit(1765124565.737:26357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15428 comm="syz.9.8228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6f29dcf749 code=0x7ffc0000 [ 589.498510][ T29] audit: type=1326 audit(1765124565.737:26358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15428 comm="syz.9.8228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f29dcf749 code=0x7ffc0000 [ 589.522212][ T29] audit: type=1326 audit(1765124565.747:26359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15428 comm="syz.9.8228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f29dcf749 code=0x7ffc0000 [ 589.545844][ T29] audit: type=1326 audit(1765124565.747:26360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15428 comm="syz.9.8228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f29dcf749 code=0x7ffc0000 [ 589.569481][ T29] audit: type=1326 audit(1765124565.747:26361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15428 comm="syz.9.8228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f29dcf749 code=0x7ffc0000 [ 589.593342][T15626] loop2: detected capacity change from 0 to 8192 [ 589.612146][T15626] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 589.679171][ T2013] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.706479][T15947] loop2: detected capacity change from 0 to 2048 [ 589.715986][T15949] loop3: detected capacity change from 0 to 256 [ 589.724958][T15947] EXT4-fs: Ignoring removed i_version option [ 589.734038][T15949] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 589.767116][T15951] siw: device registration error -23 [ 589.773890][T15951] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8238'. [ 589.787662][T15947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.800914][T15947] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.964026][T31144] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.017884][ T10] page_pool_release_retry() stalled pool shutdown: id 182, 1 inflight 60 sec [ 590.035641][T15974] loop2: detected capacity change from 0 to 8192 [ 590.046754][T15974] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 590.052821][T15981] siw: device registration error -23 [ 590.064707][T15981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8251'. [ 590.076593][T15980] lo speed is unknown, defaulting to 1000 [ 590.083773][T15980] wg1 speed is unknown, defaulting to 1000 [ 590.144037][T15980] lo speed is unknown, defaulting to 1000 [ 590.197019][T15995] loop3: detected capacity change from 0 to 1024 [ 590.203674][T15995] EXT4-fs: Ignoring removed orlov option [ 590.212034][T15995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.322230][T15995] ================================================================== [ 590.330349][T15995] BUG: KCSAN: data-race in filemap_read / filemap_read [ 590.337219][T15995] [ 590.339552][T15995] read to 0xffff888105027528 of 8 bytes by task 15998 on cpu 1: [ 590.347190][T15995] filemap_read+0x6f/0xa00 [ 590.351664][T15995] generic_file_read_iter+0x79/0x330 [ 590.356964][T15995] ext4_file_read_iter+0x1cc/0x290 [ 590.362124][T15995] copy_splice_read+0x442/0x660 [ 590.366989][T15995] splice_direct_to_actor+0x290/0x680 [ 590.372375][T15995] do_splice_direct+0xda/0x150 [ 590.377143][T15995] do_sendfile+0x380/0x650 [ 590.381574][T15995] __x64_sys_sendfile64+0x105/0x150 [ 590.386789][T15995] x64_sys_call+0x2db1/0x3000 [ 590.391488][T15995] do_syscall_64+0xd8/0x2a0 [ 590.396023][T15995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.401937][T15995] [ 590.404269][T15995] write to 0xffff888105027528 of 8 bytes by task 15995 on cpu 0: [ 590.412044][T15995] filemap_read+0x974/0xa00 [ 590.416549][T15995] generic_file_read_iter+0x79/0x330 [ 590.421840][T15995] ext4_file_read_iter+0x1cc/0x290 [ 590.426975][T15995] copy_splice_read+0x442/0x660 [ 590.431838][T15995] splice_direct_to_actor+0x290/0x680 [ 590.437212][T15995] do_splice_direct+0xda/0x150 [ 590.441978][T15995] do_sendfile+0x380/0x650 [ 590.446404][T15995] __x64_sys_sendfile64+0x105/0x150 [ 590.451613][T15995] x64_sys_call+0x2db1/0x3000 [ 590.456342][T15995] do_syscall_64+0xd8/0x2a0 [ 590.460851][T15995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.466749][T15995] [ 590.469071][T15995] value changed: 0x00000000000001fb -> 0x00000000000001fc [ 590.476179][T15995] [ 590.478501][T15995] Reported by Kernel Concurrency Sanitizer on: [ 590.484652][T15995] CPU: 0 UID: 0 PID: 15995 Comm: syz.3.8257 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 590.496030][T15995] Tainted: [W]=WARN [ 590.499846][T15995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 590.509899][T15995] ================================================================== [ 590.545295][ T29] audit: type=1326 audit(1765124566.897:26362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.3.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25be4f749 code=0x7ffc0000 [ 590.569103][ T29] audit: type=1326 audit(1765124566.897:26363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.3.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe25be4f749 code=0x7ffc0000 [ 590.592822][ T29] audit: type=1326 audit(1765124566.897:26364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.3.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe25be4f749 code=0x7ffc0000 [ 590.616506][ T29] audit: type=1326 audit(1765124566.897:26365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.3.8257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe25be4f749 code=0x7ffc0000 [ 590.704832][T23175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.