last executing test programs: 1m31.126149702s ago: executing program 1 (id=2297): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x0, 0x8147131f5dc6d5e1) pipe(&(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x0, 0x6}, {0xfff3, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x4) sendmsg$kcm(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) inotify_init1(0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) 1m30.982903864s ago: executing program 1 (id=2301): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000000)='erofs\x00', 0x1) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e", 0x19}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa636", 0x15}], 0x2}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pread64(r9, &(0x7f0000000080)=""/196, 0xc4, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRESOCT=r1, @ANYRESDEC=0x0, @ANYRESHEX=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xd1170707f0656889, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1m30.769507168s ago: executing program 1 (id=2303): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file1\x00'}) fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {0x1, 0x5}, [{0x2, 0x4}, {0x2, 0x2}, {0x2, 0x4}, {0x2, 0x0, r1}], {0x4, 0x2}, [{0x8, 0x2, r2}], {0x10, 0xa}, {0x20, 0x4}}, 0x4c, 0x0) fadvise64(r0, 0x1, 0x8, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000180000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000039644bc90000000000000000850000002a00000018110000", @ANYBLOB="4f055be462f3872c861f5e5370367522042da5492fb4dca1a53a318594c126b774c0b37c90c41dd3c30c4ad54f3566240d0808d2164f3a3171a742d10a4c9e7c82d54e6a66c4ec35578c845e6e44305077ddd3c41adf9462f5256efb8c69cb131e029223cee05bd6bfbba5b13a6939b8bc17ed19bf7721832b6341222f0a7ed6ab8f7910ae6b4dadb66311", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) close(0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @ipv4, @local, {[@dstopts={0x2}]}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@noblock_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@quota}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) setuid(r7) ioprio_set$uid(0x3, r7, 0xff00000000000000) getresgid(0x0, 0x0, 0x0) chown(&(0x7f0000000280)='./file0\x00', 0xee00, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000180)='async\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x8, 0x0, 0x400, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='page_pool_state_hold\x00', r3}, 0x18) setxattr$security_selinux(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:man_t:s0\x00', 0x1b, 0x2) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) 1m30.442498703s ago: executing program 1 (id=2306): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='kfree\x00') seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) stat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000300)="f669184087b8c6242cbef8573fd18712277769d7ba74a0ed685e031d2d83134b5e67a7257d7d0231ef52c076678e416d4649d44c8d67fd8a495b119a3be74c4b35bf22d3c21c5822ffb202943be0b3a2b808861a3eaf5cb8ab16d5db09fefd8b2930e8a0c1880920825f6e2716cb3b359fdb451beebe860cd49fa5a38786d7fd172bd1aff2e30734d993d22eeb31836c71ce38d8d8124e5e255e0338eb5c2e43a95a38e0b9d4586bd2e891f324d81d4a1454bb5760b092721aead07070f01aba25e22ef7bb4ad9d4fc60445909fb2892", 0xd0, 0x3) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xprtrdma_frwr_dereg\x00', 0xffffffffffffffff, 0x0, 0x400001fffffffff}, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=0x0) mount$9p_xen(&(0x7f0000000780), &(0x7f00000007c0)='./file2\x00', &(0x7f0000000800), 0x401, &(0x7f0000000980)=ANY=[@ANYBLOB='noreqv,noextdnd,fscache,posixacl,audit,smackfsfloor=sysfs\x00,uid>\x00'/75, @ANYRESDEC=r3, @ANYBLOB=',\x00']) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3UFvG1kdAPD/OHZp2nSTBQ6wEsvCLkorqJ1s2DbiUIqE4FQJKPcSEieK4sRR7LRNVEEqPgASQoDECS5ckPgASKgSF44IqRKcQYBACFo4cIDOyvY4TVM7cVs3TuPfT5rMmzfz/H/P0YznzTzNBDC03oqIqxHxKE3TCxExnuXnsil2WlNju4cP7sw3piTS9Po/k0iyvPZnJdn8bFbsdER87csR30yejlvb2l6Zq1TKG9lyqb66XqptbV9cXp1bKi+V12Zmpi/NXp59b3aqL+08FxFXvvjXH3z3Z1+68qvP3PrTjb+f/1ajWmPZ+r3teEb5g1a2ml5ofhd7C2w8Z7DjKN9sYWa00xYjT+Xcfcl1AgCgs8Y5/gcj4pMRcSHGY+Tg01kAAADgFZR+fiz+l0SknZ3qkg8AAAC8QnLNMbBJrpiNBRiLXK5YbI3h/XCcyVWqtfqnF6ubawutsbITUcgtLlfKU9lY4YkoJI3l6Wb68fK7+5ZnIuL1iPj++GhzuThfrSwM+uIHAAAADImz+/r//xlv9f8BAACAE2Zi0BUAAAAAXjr9fwAAADj59P8BAADgRPvKtWuNKW2//3rh5tbmSvXmxYVybaW4ujlfnK9urBeXqtWl5jP7Vg/7vEq1uv7ZWNu8XaqXa/VSbWv7xmp1c61+Y/mJV2ADAAAAR+j1j9/7QxIRO58bbU4Np3or2uNmwHGV300l2bzDbv3H11rzvxxRpYAjMTLoCgADkx90BYCBKQy6AsDAJYes7zp457fZ/BP9rQ8AANB/kx/tfv8/d2DJnYNXA8eenRiGl/v/MLya9/97HcnrZAFOlIIzABh6L3z//1Bp+kwVAgAA+m6sOSW5YnZ5byxyuWIx4lzztQCFZHG5Up6KiNci4vfjhQ80lqebJZND+wwAAAAAAAAAAAAAAAAAAAAAAAAAQEuaJpECAAAAJ1pE7m/Jr1vP8p8cf2ds//WBU8l/xyN7ReitH1//4e25en1jupH/r938+o+y/HcHcQUDAAAAhsIzvcC/3U9v9+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJ8ePrgz356OMu4/vhARE53i5+N0c346ChFx5t9J5PeUy0XESB/ijzb+fKRT/KRRrd2Q++Mn7bIvaOfugfFjIvsWOsU/24f4MMzuNY4/Vzvtf7l4qznvvP/lI55Yfl7dj3+xe/wb6bL/n+sxxhv3f1HqGv9uxBv5zsefdvykS/y3e4z/ja9vb3dbl/4kYrLj70/yRKxSfXW9VNvavri8OrdUXiqvzcxMX5q9PPve7FRpcblSzv52jPG9j/3y0UHtP9Ml/sQh7X+nx/b///7tBx9qJQud4p9/u0P83/w02+Lp+O3fvk9l6cb6yXZ6p5Xe682f/+7Ng9q/0KX9h/3/z/fY/gtf/c6fe9wUADgCta3tlblKpbxxYhONXvoxqIbEMUx8u68fmKZp2tinXuBzkjgOX0szMegjEwAA0G+PT/oHXRMAAAAAAAAAAAAAAAAAAAAYXkfxOLH9MXd2U0k/HqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAX7wcAAP//ZWfZVg==") r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000c00)={0xb0000000}) shutdown(r6, 0x1) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r7, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46, 0x43, 0x4f, 0x50, 0x43, 0x4f]}, 0x31) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 1m29.883522381s ago: executing program 1 (id=2316): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000000)='erofs\x00', 0x1) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e", 0x19}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa636", 0x15}], 0x2}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pread64(r9, &(0x7f0000000080)=""/196, 0xc4, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRESOCT=r1, @ANYRESDEC=0x0, @ANYRESHEX=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xd1170707f0656889, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1m29.573065316s ago: executing program 1 (id=2318): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r1, &(0x7f0000000140)='#', 0x1, 0x8000c61) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000ea000000691065000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timerfd_gettime(r1, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='qdisc_reset\x00', r6, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") fallocate(r0, 0x0, 0x0, 0x8000c62) setsockopt$inet6_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000200)="218add146221357f1caa7383749e0c8d365dc15118b7715a060c23e10c03afe837acc006bf1773351d59f34cf1d15eded7212a6fd57c12909034408979c60e645f8c7d9eab1fc79b15f1449872e2389aa727aabe12a4749aa398a88a0cf9ceddde384f4576cc36413be1c30af6f2bfa2379c53d965f2461e10088e981cb4c40788091f8ff2c2b8f2bd179c1924cf48fcce67b6599469bb513525bedd10f5e1233135fc0f2870d730da740dda6ad02908f4807fd1e0", 0xb5) 1m29.572456236s ago: executing program 32 (id=2318): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r1, &(0x7f0000000140)='#', 0x1, 0x8000c61) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000ea000000691065000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timerfd_gettime(r1, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='qdisc_reset\x00', r6, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") fallocate(r0, 0x0, 0x0, 0x8000c62) setsockopt$inet6_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000200)="218add146221357f1caa7383749e0c8d365dc15118b7715a060c23e10c03afe837acc006bf1773351d59f34cf1d15eded7212a6fd57c12909034408979c60e645f8c7d9eab1fc79b15f1449872e2389aa727aabe12a4749aa398a88a0cf9ceddde384f4576cc36413be1c30af6f2bfa2379c53d965f2461e10088e981cb4c40788091f8ff2c2b8f2bd179c1924cf48fcce67b6599469bb513525bedd10f5e1233135fc0f2870d730da740dda6ad02908f4807fd1e0", 0xb5) 5.81526993s ago: executing program 0 (id=2998): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[], 0xc) 5.749713321s ago: executing program 0 (id=3000): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x1, 'caif0\x00', {}, 0x8}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/cgroups\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'veth1_to_batadv\x00', 0x1000}) read$char_usb(r1, &(0x7f0000001840)=""/4090, 0xffa) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=@delchain={0x34, 0x2c, 0xf35, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4004000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x1, 0x7887, 0x1, 0x8, {{0x6, 0x4, 0x1, 0x14, 0x18, 0x64, 0x0, 0x6, 0x29, 0x0, @multicast1, @private=0xa010102, {[@noop]}}}}}) getpeername$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x0, 0x400, 0x0, @remote, @loopback, 0xbc33c5114eb277c0, 0x1, 0xa, 0x81}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'pimreg0\x00', 0x0}) r11 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3ff}}, {0x4}}]}]}, 0x54}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x8000, 0x7800, 0xdae, 0x379, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x64, 0x0, 0x8, 0x7cf44c537b5f8a52, 0x0, @multicast1, @multicast2, {[@ssrr={0x89, 0xf, 0x84, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x94, 0x3, '3'}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x6, 0x6a4, 0x10, @dev={0xfe, 0x80, '\x00', 0x1c}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x20, 0x8000, 0x6, 0x2}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000007c0)={0x0, @broadcast, @initdev}, &(0x7f0000000800)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000a00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x164, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x4}, @HEADER={0x4}]}, 0x164}, 0x1, 0x0, 0x0, 0x26004010}, 0x80) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmmsg(r1, &(0x7f0000000000), 0x0, 0x2400) fcntl$setstatus(r0, 0x4, 0x46400) 3.917897279s ago: executing program 5 (id=3012): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) r3 = socket$netlink(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x8, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_setup(0x1, &(0x7f0000000740)=0x0) io_submit(r7, 0x1, &(0x7f0000000a40)=[0x0]) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x0, 0x1}, 0xc) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xcb, &(0x7f0000000540), 0xc) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000600)={{{@in=@local, @in=@local, 0x4e20, 0x101, 0x4e23, 0x7, 0x2, 0x80, 0x20, 0x32, 0x0, r11}, {0x11c2, 0x0, 0xfffffffffffff001, 0x3, 0x199, 0xe, 0x11, 0x5}, {0x5, 0x40000000, 0x586}, 0x1, 0x6e6bbd, 0x2, 0x1, 0x1, 0x2}, {{@in6=@loopback, 0x4d6, 0x32}, 0x2, @in6=@mcast1, 0x3507, 0x2, 0x1, 0x9, 0x5, 0x5cea6548, 0x5}}, 0xe8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) 3.91275266s ago: executing program 0 (id=3022): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setownex(r0, 0xf, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_create(0x9) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_io_uring_setup(0x52c3, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000000000), &(0x7f0000000100)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073e07a3100000000050005000200000005000100060000008f3076e3b3446d9da1485bc6144c42ad9b33ff48864fb2f2de1069e30348c94ea5c81aabced82a310d9335d4493e817fb94640e909123cdf08b2a617d40a8ed88200aa0f6deeb7b91b95e5da268130d3dc6828cec70000c2170532bf5d"], 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x70, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x100}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="097941eecd69"}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r3}, 0x8) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r8}, 0x18) r9 = socket$inet6(0xa, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet6(r9, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffc0}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040008800c0001"], 0x34}}, 0xc000) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}}}]}, 0x40}}, 0x0) 3.910798739s ago: executing program 4 (id=3024): syz_emit_ethernet(0xee, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040850}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="a093476b1e32450799ebce47815cd7ab1f9a90cddcaff4472cb7ac7402c49e4d478ff826486602f5487f8f9017b10e0dee3adacc0da5ecc94765926c3b85b1b9985749ea5664a8e644bbb1bc37328139d946872a3a600face8da8b1a334963eda6bda65a8c43433dca08d319280bf34e4faca77493aa3f168281b7e0cec266a88e08edbf97b71d39c182e536"], 0x0, 0x21, 0x0, 0x0, 0x10000, 0x0, @void, @value}, 0x28) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x244000, 0xe3968136f5c15b30, 0x1}, 0x18) faccessat2(r3, &(0x7f0000000300)='./file0\x00', 0xff, 0x1000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0x15, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r9 = eventfd2(0x0, 0x0) io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, r9}]) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x80c406, &(0x7f00000005c0)=ANY=[], 0xff, 0x2bc, &(0x7f0000000180)="$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") r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r10, &(0x7f0000000140)='./file1\x00', r10, &(0x7f0000000980)='./file0\x00', 0x0) ppoll(&(0x7f00000003c0)=[{r7, 0x4000}], 0x1, 0x0, 0x0, 0x0) shutdown(r7, 0x0) ioctl$KDSIGACCEPT(r4, 0x5607, 0x3) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x7fff}) fcntl$setlease(r2, 0x400, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="0203ff030c00000000000000fddbdf25010009000000000003000600000000000200000000000000000000000000010002000100000000000000050b00000000030005000000000002000000ac141daa00000000000000000100140006"], 0x60}, 0x1, 0x7}, 0x0) 3.345967018s ago: executing program 0 (id=3014): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYRES16], 0xc) r1 = syz_io_uring_setup(0x605, &(0x7f0000000380)={0x0, 0x5646, 0x100, 0x40000003, 0x3d2}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@unlock_all, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffc, 0x60020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x3, 0x0, 0x0, 0x2, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xffffffffffffdffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x18) pipe2(&(0x7f0000000040), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 2.978410364s ago: executing program 0 (id=3015): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f00000003c0), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40020000) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x8, 0xc, 0x1, 0x51, @local, @loopback={0xff00, 0x460c6}, 0x8000, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='module_request\x00', r8}, 0x18) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r11}, 0x10) 2.959854624s ago: executing program 4 (id=3016): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40882, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={r3, @private=0xa010100, @multicast1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18) syz_emit_ethernet(0x85, &(0x7f0000001200)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000770000e0000011907800000000000000000000000000639078078e359f702ec9cc39479c3027d027dff42eb1cf7cf4e8a7a38bace0206e4b0c4122bf7c9df3d012e676e4283b8cbb074b05430ed6738de4bba84f7135143324de3858d8b3775cd815022335c72be514f6b31c77f10000af444df0"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x8000}, 0x18) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00'}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) brk(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r8, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) close(r6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r6) 2.910295165s ago: executing program 2 (id=3017): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYRES16], 0xc) r1 = syz_io_uring_setup(0x605, &(0x7f0000000380)={0x0, 0x5646, 0x100, 0x40000003, 0x3d2}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@unlock_all, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffc, 0x60020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x3, 0x0, 0x0, 0x2, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xffffffffffffdffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r10 = syz_open_pts(r9, 0x141601) write(r10, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r8, 0xffffffffffffffff, 0x0) ioperm(0x0, 0xd, 0x4000000000000020) ioperm(0x0, 0x40, 0x0) close(r5) mq_unlink(0x0) 2.750622218s ago: executing program 2 (id=3020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x40000010) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x41}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='mr_alloc\x00', r4}, 0x18) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='xprtrdma_err_chunk\x00', r10}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 2.632907179s ago: executing program 4 (id=3021): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x801, &(0x7f0000000000)={[{@block_validity}, {@nojournal_checksum}, {@errors_remount}, {@norecovery}, {@nojournal_checksum}, {@mblk_io_submit}, {@init_itable_val}, {@barrier_val}, {@grpjquota}, {@grpquota}, {@usrjquota}]}, 0x1, 0x7f0, &(0x7f0000001140)="$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") chdir(&(0x7f0000000300)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/234, 0xea) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) r1 = socket$qrtr(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x0, 0xfff1}, {0xd}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x2, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xffffffffffffffcc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x19}]}]}]}}]}, 0x54}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = socket$packet(0x11, 0x0, 0x300) get_mempolicy(0x0, &(0x7f00000000c0), 0x1, &(0x7f0000ffd000/0x2000)=nil, 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0x10000010}) bind$qrtr(r1, &(0x7f00000003c0)={0x2a, 0x1, 0x4001}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000007290000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000008a54d3a8ca710608efe100000007020000f8ffffffb703000008000010b70400000000000f89b80388745c0aa455509389ae6743d3f9740124"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@grpjquota}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@journal_path={'journal_path', 0x3d, './file2'}}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.627890899s ago: executing program 5 (id=3025): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x27, 0x14, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TCSBRKP(r0, 0x5425, 0x100000000000000) r5 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) tkill(r5, 0x1) tkill(r5, 0x2031) syz_io_uring_setup(0x1458, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040200000000806c010000150010001800feffffff09000d2000000401a80074efc22bb31ad49f50a03cb4d92706000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e67c20b278d", 0x62}], 0x1}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r7, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000000)="722add2926", 0x5}, {&(0x7f0000000280)="6c06d6c6d4eecfff16f59ecefc2ce397b286063eecbb257ef7894ce064b03b7c8e47c42e011ec948e5b1d04c5f1426f2926fb627f5bd3a3822df0dded1daab888a37dd06e6ec88630a54b271f9a562a7eb300f9bed156ba21fed43727b7c6ac3c1e58eb82e849595592c6c4527626a106a9a85b0984231f9ab360f042ae6650d76599ea38445ea1667a812d68d3f3e16f467ff9aeb13c3a38ce6da045a5b53ad1bc2d014b7ba7c47207a983e880436c05519e121860f185065be48aa2119df9d621c273571e0a3c73677fe869d695a01d8fafb205b0b1b2b4b2e940558fc9180db4faf284fe7d5ed", 0xe8}, {&(0x7f0000000180)="4d1c02d949d191e7250af2945fedb11246c9676fa87f409adf890b634608f571c376a3c2b5d96aad64ada33ccb04ee217688b1ed1ea16fa0ddd8c99b6045e1dcd0151e2b", 0x44}, {&(0x7f0000000080)="0eac9784ad18ba6164917ecd350ce94b073622fe7d58cd2aa7fc7f184f84861f3a43d8", 0x23}], 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000004000000000000005ad38c52ec412d13cac176dee3cba2060000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="205f0467b2b4b10de900000000000000000000000000000008000100020000006dfe08950a475c6a645956cb06b6dd649a3f09731a87f5c408c32eda77557f4f4c614c70b8e9e143ca1f0a9e569aeb57602e1f09d16e63b0aa86ade837ec4adf7cc9ffddf3ac7a6e4db7130fd41f973a2250b576f348124949b71448f4f10c98d1e90aadf648abed63424f31bb2440c606e7cebbea226c328b362ed184512712f5b93aec7b2b68816c46a26d27468036ae3a707fcf0d"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) vmsplice(r1, 0x0, 0x0, 0x1) 1.913133911s ago: executing program 3 (id=3026): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, 0x0, 0x107042, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x187842, 0x147) recvfrom$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x10b942, 0x140) 1.9127789s ago: executing program 4 (id=3027): setrlimit(0x0, &(0x7f0000000000)={0x8000000000000001, 0xffffffffffffffff}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) r1 = socket$inet6(0xa, 0x802, 0x0) unlink(&(0x7f0000000540)='./file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x130, 0x26010000, 0x170, 0x130, 0x260, 0x220, 0x220, 0x260, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x170, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00], 0x4e24, 0x4e22, 0x4e22, 0x4e22, 0xbe, 0x1, 0x2, 0x4, 0x6}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000004c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000040)={0xa525, 0xe, 0x62, {0x0, 0x101}, 0x0, 0x8000000}) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40808044}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x8000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) syz_usb_connect$cdc_ecm(0x2, 0x6c, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0xd, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0xfd77}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x300, 0x200, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @country_functional={0xa, 0x24, 0x7, 0x3, 0x5, [0x6, 0x103]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xe, 0xf, 0x5}}}}}]}}]}}, 0x0) 1.798055412s ago: executing program 2 (id=3028): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d00000000109500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0x0, @host}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000cff500000000ffffffff00000700", @ANYRES32=0x0, @ANYBLOB="000000000140060030001280080001006873720024000280050007000100000008000100", @ANYRES32=r5, @ANYBLOB="0c000200", @ANYRES32=r3, @ANYBLOB="0500060008000000"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe}) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x200000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.746335653s ago: executing program 5 (id=3029): r0 = perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff7}]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) lsetxattr$security_capability(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), &(0x7f0000000800)=@v2={0x2000000, [{0x8001, 0x7}, {0x8, 0x6}]}, 0x14, 0x6) ioperm(0x0, 0x7, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2b8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048010) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) prctl$PR_SET_NAME(0xf, &(0x7f0000000740)='^%\x00') r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) socket$kcm(0x10, 0x4, 0x10) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") open(&(0x7f0000000840)='./file0\x00', 0x4002, 0x90) 1.711226533s ago: executing program 3 (id=3030): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x200}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) r2 = socket(0x10, 0x3, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4}}, 0x20) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x6f9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8002, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffd, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e400000100000000060000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000400"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r7, 0xa, 0x13) fcntl$setlease(r7, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r7, 0x400, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) 1.565417935s ago: executing program 2 (id=3031): setrlimit(0x0, &(0x7f0000000000)={0x8000000000000001, 0xffffffffffffffff}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) r1 = socket$inet6(0xa, 0x802, 0x0) unlink(&(0x7f0000000540)='./file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x130, 0x26010000, 0x170, 0x130, 0x260, 0x220, 0x220, 0x260, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x170, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00], 0x4e24, 0x4e22, 0x4e22, 0x4e22, 0xbe, 0x1, 0x2, 0x4, 0x6}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000004c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000040)={0xa525, 0xe, 0x62, {0x0, 0x101}, 0x0, 0x8000000}) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40808044}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x8000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0xd, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0xfd77}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x300, 0x200, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @dmm={0x7, 0x24, 0x14, 0x7, 0x4}, @country_functional={0x8, 0x24, 0x7, 0x3, 0x5, [0x103]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xe, 0xf, 0x5}}}}}]}}]}}, 0x0) 1.538633416s ago: executing program 3 (id=3032): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000000)='erofs\x00', 0x1) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e", 0x19}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b8", 0x12}], 0x2}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pread64(r7, &(0x7f0000000080)=""/196, 0xc4, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xd1170707f0656889, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{}, [@alu={0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1.465254447s ago: executing program 5 (id=3033): syz_clone(0x2220700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0xb, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000e8e09e9ab702000008000000b70300000000000085000000c800000095"], &(0x7f00000005c0)='syzkaller\x00', 0x8, 0x79, &(0x7f0000000140)=""/121, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYBLOB="310fd80e47b13c88fdfab150f093cb4fefa67b58fdf65a05c93aa6cced5051c9c588df36be9b56844d4813b349d1403734f29f752ee6565421a54c411e255a266c424cca5fdf1feb8cf4454d9a2655bb3bd35eb91a45b665c70f3e5df638a76249c516e2a4bd322ae02af2a603e42d26833379e08c5a0bcbe02dc6fa4438f90a130ee7d8216f3664fe9c64b8518e51c9579d3502509f5a03e8785f231457c2528eb2fffda3b8cb95ff498d3047aeb410ee0e93abc29fda6ade5e24", @ANYRESHEX=0x0, @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffec3, 0x10, 0x0, 0xffffffd6, 0x0, 0xffffffffffffffff, 0xff77, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103000000000000000032"], 0x30}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05030500d3fc030000004788031c", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000a40)=ANY=[@ANYBLOB="09000000000000000200fffee0000002"], 0x190) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x453, 0x4, 0x70bd34, 0x25dfdbff, "b8"}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000d80)={[{@nomblk_io_submit}, {@delalloc}, {@lazytime}, {@lazytime}, {@nojournal_checksum}, {@stripe={'stripe', 0x3d, 0x3d}}]}, 0x0, 0x42f, &(0x7f0000000940)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r9, 0x40086607, &(0x7f0000000080)=0x5) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r10, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) 1.25411458s ago: executing program 5 (id=3034): syz_emit_ethernet(0xee, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040850}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="a093476b1e32450799ebce47815cd7ab1f9a90cddcaff4472cb7ac7402c49e4d478ff826486602f5487f8f9017b10e0dee3adacc0da5ecc94765926c3b85b1b9985749ea5664a8e644bbb1bc37328139d946872a3a600face8da8b1a334963eda6bda65a8c43433dca08d319280bf34e4faca77493aa3f168281b7e0cec266a88e08edbf97b71d39c182e536"], 0x0, 0x21, 0x0, 0x0, 0x10000, 0x0, @void, @value}, 0x28) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x244000, 0xe3968136f5c15b30, 0x1}, 0x18) faccessat2(r3, &(0x7f0000000300)='./file0\x00', 0xff, 0x1000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0x15, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r9 = eventfd2(0x0, 0x0) io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, r9}]) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x80c406, &(0x7f00000005c0)=ANY=[], 0xff, 0x2bc, &(0x7f0000000180)="$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") r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r10, &(0x7f0000000140)='./file1\x00', r10, &(0x7f0000000980)='./file0\x00', 0x0) ppoll(&(0x7f00000003c0)=[{r7, 0x4000}], 0x1, 0x0, 0x0, 0x0) shutdown(r7, 0x0) ioctl$KDSIGACCEPT(r4, 0x5607, 0x3) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x7fff}) fcntl$setlease(r2, 0x400, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="0203ff030c00000000000000fddbdf25010009000000000003000600000000000200000000000000000000000000010002000100000000000000050b00000000030005000000000002000000ac141daa00000000000000000100140006"], 0x60}, 0x1, 0x7}, 0x0) 1.25321609s ago: executing program 3 (id=3044): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYRES16], 0xc) r1 = syz_io_uring_setup(0x605, &(0x7f0000000380)={0x0, 0x5646, 0x100, 0x40000003, 0x3d2}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@unlock_all, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffc, 0x60020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x3, 0x0, 0x0, 0x2, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xffffffffffffdffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r10 = syz_open_pts(r9, 0x141601) write(r10, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r8, 0xffffffffffffffff, 0x0) ioperm(0x0, 0xd, 0x4000000000000020) ioperm(0x0, 0x40, 0x0) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff3}, {0xe, 0xd}}, [@TCA_RATE={0x54, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) mq_unlink(0x0) 770.722658ms ago: executing program 4 (id=3035): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x68, 0x0, &(0x7f0000000300)="cc6019f09144e1b997f0c32844f2951bc1b2af6d189d10b60d827f3669466ffd938cd93dd7e8334f90f715f49a58d83b151b1ca9006203e8a52e94997f96f898eb5221e8d59bfc38e751d0d52d7fef8b75d7abef59db3b8c5d669066df9b75cd6901f4ff7f38115c", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@unlock_all, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffc, 0x60020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x3, 0x0, 0x0, 0x2, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xffffffffffffdffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r10 = syz_open_pts(r9, 0x141601) write(r10, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r8, 0xffffffffffffffff, 0x0) ioperm(0x0, 0xd, 0x4000000000000020) ioperm(0x0, 0x40, 0x0) close(r5) mq_unlink(0x0) 329.078445ms ago: executing program 5 (id=3036): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) pwrite64(r0, &(0x7f0000000000), 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x2007) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0xfffffffffffffc94, 0x0, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) 328.793455ms ago: executing program 4 (id=3037): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{0x4, 0x1c000000}, {0xc, 0x346b}, {0x10, 0x200}, {0xa, 0x5}, {0xb, 0xfffffffe}, {0x1, 0xdff2}, {0x10, 0x9}, {0x9, 0x2}]}]}, {0x0, [0x30, 0x2e, 0x5f, 0x0, 0x61]}}, &(0x7f0000000240)=""/29, 0x83, 0x1d, 0x0, 0x7ff, 0x0, @void, @value}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8923, &(0x7f0000000000)={'bond0\x00', 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r7}}, 0x20) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r9, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r9, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 328.380775ms ago: executing program 2 (id=3048): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000002300)="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", 0x57d}], 0x1}}], 0x1, 0x4001c00) 327.734815ms ago: executing program 3 (id=3049): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x4, 0x1}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24000850}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0xa, 0x13, r5, 0x0, 0x0, 0x0, 0x1, 0x1, {0x4003}}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000008c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x5}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x48}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xfffffff8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x68}}, 0x4000) r11 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r11, &(0x7f0000000200)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000002300)="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", 0x57d}], 0x1}}], 0x1, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000300)=0xc) 292.035445ms ago: executing program 2 (id=3038): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="96ca3430396413f63415e57d760b0000000516000002000000f8ff000005000000794c3f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_emit_ethernet(0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="e90c61151451e6110103c212a19a4539120faca20180c20000000800450000240000e0000011907800000000000000000000000000109078a10c000109cf88f0"], 0x0) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "9e188a80c32aa9b86ed6ce56992732d9f7fc6cda762c07530a038941764a92bb", "074336477e9205df5f47f7da965c25c746ba7f8ca07841d3da17308a6df3f54855ecedd6d8664fa125e3972a48e81039", "a562ff321beb3f036b9fd27aeff89c8e79a57a3873e0b4e6553e2c44", {"4cf02a016458a5f67aa497153eddc6a1", "9a3f9661ac468177dc130be49bdd8eb5"}}}}}}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x6b, 0xf, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r4, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) dup3(r3, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="434881c837f467e3ad164ce69b6cf05e2f627bddc926f1d67003d42011708c7d3a015f57d81a8b44f3daeb61cfddeb95ea617425a698c083e8b2fa5ed97fbad84d3084d34082c1f1136e4279f848246355e0290a199cb54d8de99a07", @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f00000002c0)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10000) pipe2(0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 0s ago: executing program 0 (id=3039): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=r1, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRES32=r1, @ANYRES16=r1, @ANYRES16=r1, @ANYRES8=0x0, @ANYBLOB="16277588850495dca4a1466160209fa52a71d7d6fe007168c5682ee54441dd86febfd27fb3b90a65996cfced8df1869e526621e88ba39d3512934224b9e64ef30a14f36999e5b4fe657167afbf9633dc4799ddfbd408d5572ffb60060a9ad41f66aa98", @ANYRES64=r1], 0x48) r4 = epoll_create(0xff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESDEC=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r6}, 0x10) r7 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0x0, 0x0, 0x8) tkill(r7, 0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0xa0002000}) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x3f, 0x2b, 0xff, 0x0, 0x0, 0x40008, 0x490, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100}, 0x0, 0x0, 0x0, 0x9, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0xf) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x19}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x20040084) ppoll(&(0x7f00000001c0)=[{r8, 0x2d2c}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7a8e, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) r9 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write$binfmt_elf64(r9, &(0x7f0000000180)=ANY=[], 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): tal_pgpgin 49153 [ 190.627187][T11369] total_pgpgout 49151 [ 190.631163][T11369] total_pgfault 47926 [ 190.635361][T11369] total_pgmajfault 45 [ 190.639343][T11369] total_inactive_anon 8192 [ 190.643764][T11369] total_active_anon 0 [ 190.648007][T11369] total_inactive_file 0 [ 190.652159][T11369] total_active_file 0 [ 190.656331][T11369] total_unevictable 0 [ 190.660627][T11369] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2646,pid=11369,uid=0 [ 190.675872][T11369] Memory cgroup out of memory: Killed process 11369 (syz.5.2646) total-vm:95900kB, anon-rss:1044kB, file-rss:22324kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 190.921045][T11393] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2651'. [ 190.923233][T11391] lo: entered allmulticast mode [ 190.940729][T11393] xt_hashlimit: size too large, truncated to 1048576 [ 191.007187][T11388] ip6gretap0 speed is unknown, defaulting to 1000 [ 191.067023][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2651'. [ 191.081837][T11399] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 191.147004][T11391] lo: left allmulticast mode [ 191.152391][T11388] lo speed is unknown, defaulting to 1000 [ 191.191010][T11393] xt_socket: unknown flags 0xc [ 191.236997][T11404] loop2: detected capacity change from 0 to 2048 [ 191.258541][T11404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.366639][T11411] wg2: entered promiscuous mode [ 191.371544][T11411] wg2: entered allmulticast mode [ 191.380563][T11411] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2657'. [ 191.392913][T11411] veth1_to_hsr: entered promiscuous mode [ 191.398822][T11411] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2657'. [ 191.408107][T11411] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 191.437602][T11411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2657'. [ 191.478450][T11406] ip6gretap0 speed is unknown, defaulting to 1000 [ 191.549092][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2659'. [ 191.558808][T11418] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 191.676279][T11406] lo speed is unknown, defaulting to 1000 [ 192.617847][T11432] loop0: detected capacity change from 0 to 764 [ 192.825735][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 192.825749][ T29] audit: type=1326 audit(19231628.159:40877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.2.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee6b50d169 code=0x7ffc0000 [ 192.866301][T11406] netlink: 'syz.3.2653': attribute type 13 has an invalid length. [ 192.889375][T11406] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 192.922087][ T29] audit: type=1326 audit(19231628.189:40878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.2.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6b50d169 code=0x7ffc0000 [ 192.945789][ T29] audit: type=1326 audit(19231628.189:40879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.2.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6b50d169 code=0x7ffc0000 [ 192.969242][ T29] audit: type=1326 audit(19231628.189:40880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.2.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee6b50d169 code=0x7ffc0000 [ 192.992666][ T29] audit: type=1326 audit(19231628.189:40881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.2.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6b50d169 code=0x7ffc0000 [ 193.016231][ T29] audit: type=1326 audit(19231628.189:40882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.2.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6b50d169 code=0x7ffc0000 [ 193.039726][ T29] audit: type=1326 audit(19231628.189:40883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.2.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fee6b50d169 code=0x7ffc0000 [ 193.063152][ T29] audit: type=1326 audit(19231628.189:40884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.2.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6b50d169 code=0x7ffc0000 [ 193.086833][ T29] audit: type=1326 audit(19231628.189:40885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11403 comm="syz.2.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6b50d169 code=0x7ffc0000 [ 193.143738][T11432] ip6gretap0 speed is unknown, defaulting to 1000 [ 193.256718][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2653'. [ 193.338969][T11432] lo speed is unknown, defaulting to 1000 [ 193.365535][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.483377][ T29] audit: type=1326 audit(19231628.799:40886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b32bd169 code=0x7ffc0000 [ 193.642343][T11454] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 193.654513][T11454] bond0: (slave lo): Error: Device can not be enslaved while up [ 193.791969][T11458] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 193.838098][T11452] ip6gretap0 speed is unknown, defaulting to 1000 [ 193.850592][T11462] team0: Port device bridge0 added [ 193.906352][T11452] lo speed is unknown, defaulting to 1000 [ 193.976851][T11459] loop0: detected capacity change from 0 to 8192 [ 194.015333][T11459] syz.0.2679: attempt to access beyond end of device [ 194.015333][T11459] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 194.028886][T11459] Buffer I/O error on dev loop0, logical block 57847, async page read [ 194.081501][T11459] bridge_slave_0: left allmulticast mode [ 194.087288][T11459] bridge_slave_0: left promiscuous mode [ 194.092962][T11459] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.255587][T11469] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 194.658525][T11474] __nla_validate_parse: 11 callbacks suppressed [ 194.658542][T11474] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2671'. [ 194.682160][T11475] loop2: detected capacity change from 0 to 2048 [ 194.706080][T11475] EXT4-fs: Ignoring removed oldalloc option [ 194.728218][T11474] xt_hashlimit: size too large, truncated to 1048576 [ 194.755648][T11475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.865830][T11485] bridge0: entered promiscuous mode [ 194.871783][T11485] team0: Port device bridge0 added [ 194.887587][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2671'. [ 194.930948][T11486] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 194.970377][T11489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.980723][T11489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.991434][T11489] @: renamed from macsec0 (while UP) [ 195.020485][T11474] xt_socket: unknown flags 0xc [ 195.109422][T11495] loop0: detected capacity change from 0 to 512 [ 195.129497][T11495] EXT4-fs (loop0): orphan cleanup on readonly fs [ 195.136857][T11494] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 195.155148][T11495] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kfree: bg 0: block 248: padding at end of block bitmap is not set [ 195.178632][T11495] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm kfree: Failed to acquire dquot type 1 [ 195.204552][T11495] EXT4-fs (loop0): 1 truncate cleaned up [ 195.219266][T11495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.277545][T11495] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 195.297837][T11495] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm kfree: Failed to acquire dquot type 1 [ 195.309467][T11495] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 195.346808][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.500145][T11506] ip6gretap0 speed is unknown, defaulting to 1000 [ 195.569533][T11507] ip6gretap0 speed is unknown, defaulting to 1000 [ 195.661169][T11506] lo speed is unknown, defaulting to 1000 [ 195.718576][T11507] lo speed is unknown, defaulting to 1000 [ 195.767245][T11508] netlink: 'syz.0.2678': attribute type 13 has an invalid length. [ 195.819941][T11508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.859746][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2678'. [ 196.280625][T11517] ip6gretap0 speed is unknown, defaulting to 1000 [ 196.313703][T11526] IPVS: Error connecting to the multicast addr [ 196.320528][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2683'. [ 196.395222][T11521] loop0: detected capacity change from 0 to 128 [ 196.466835][T11517] lo speed is unknown, defaulting to 1000 [ 196.686736][T11517] syz.0.2698: attempt to access beyond end of device [ 196.686736][T11517] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 196.716721][T11517] syz.0.2698: attempt to access beyond end of device [ 196.716721][T11517] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 197.665958][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.690113][T11534] rdma_rxe: rxe_newlink: failed to add bond0 [ 197.779457][T11535] ip6gretap0 speed is unknown, defaulting to 1000 [ 197.826029][T11551] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2692'. [ 197.834464][T11549] bond2: entered promiscuous mode [ 197.840163][T11549] bond2: entered allmulticast mode [ 197.855231][T11549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.864384][T11551] xt_hashlimit: size too large, truncated to 1048576 [ 197.881673][T11554] loop5: detected capacity change from 0 to 1024 [ 197.964490][T11549] bond2 (unregistering): Released all slaves [ 198.011427][T11554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.060684][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2692'. [ 198.069186][T11534] ip6gretap0 speed is unknown, defaulting to 1000 [ 198.085534][T11560] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 198.114439][T11560] xt_socket: unknown flags 0xc [ 198.198587][ T29] kauditd_printk_skb: 544 callbacks suppressed [ 198.198606][ T29] audit: type=1400 audit(19231633.529:41427): avc: denied { setattr } for pid=11547 comm="syz.5.2693" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.290889][T11535] lo speed is unknown, defaulting to 1000 [ 198.408637][T11534] lo speed is unknown, defaulting to 1000 [ 198.419634][ T29] audit: type=1400 audit(19231633.749:41428): avc: denied { setopt } for pid=11566 comm="syz.0.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 198.601648][ T29] audit: type=1326 audit(19231633.929:41429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6b50d169 code=0x7ffc0000 [ 198.625148][ T29] audit: type=1326 audit(19231633.929:41430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6b50d169 code=0x7ffc0000 [ 198.656618][ T29] audit: type=1326 audit(19231633.989:41431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fee6b50d169 code=0x7ffc0000 [ 198.680114][ T29] audit: type=1326 audit(19231633.989:41432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6b50d169 code=0x7ffc0000 [ 198.704002][ T29] audit: type=1326 audit(19231633.989:41433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6b50d169 code=0x7ffc0000 [ 198.727882][ T29] audit: type=1326 audit(19231633.989:41434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fee6b50d169 code=0x7ffc0000 [ 198.743224][T11571] loop2: detected capacity change from 0 to 512 [ 198.751123][ T29] audit: type=1326 audit(19231633.989:41435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6b50d169 code=0x7ffc0000 [ 198.780333][ T29] audit: type=1326 audit(19231633.989:41436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee6b50d169 code=0x7ffc0000 [ 198.816554][T11571] EXT4-fs (loop2): orphan cleanup on readonly fs [ 198.825705][T10094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.842330][T11571] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kfree: bg 0: block 248: padding at end of block bitmap is not set [ 198.861728][T11571] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm kfree: Failed to acquire dquot type 1 [ 198.896299][T11571] EXT4-fs (loop2): 1 truncate cleaned up [ 198.904035][T11571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.002823][T11571] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 199.075524][T11571] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm kfree: Failed to acquire dquot type 1 [ 199.131740][T11571] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 199.276651][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.403532][T11574] ip6gretap0 speed is unknown, defaulting to 1000 [ 199.480555][T11585] loop2: detected capacity change from 0 to 512 [ 199.488437][T11585] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.559542][T11585] EXT4-fs (loop2): orphan cleanup on readonly fs [ 199.566603][T11585] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2701: bg 0: block 248: padding at end of block bitmap is not set [ 199.581462][T11585] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2701: Failed to acquire dquot type 1 [ 199.595108][T11585] EXT4-fs (loop2): 1 truncate cleaned up [ 199.942196][T11594] loop0: detected capacity change from 0 to 164 [ 200.000065][T11577] netlink: 'syz.5.2697': attribute type 13 has an invalid length. [ 200.109781][T11594] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 200.166900][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2697'. [ 200.283960][T11577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.361049][T11574] lo speed is unknown, defaulting to 1000 [ 200.383047][T11585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.693812][T11612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2707'. [ 200.880433][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.891923][T11614] loop0: detected capacity change from 0 to 4096 [ 200.900635][T11614] EXT4-fs: Ignoring removed orlov option [ 200.906392][T11614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.940895][T11626] loop2: detected capacity change from 0 to 512 [ 200.950131][T11614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.996167][T11626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.112766][T11636] IPVS: stopping backup sync thread 9699 ... [ 201.155728][T11614] vhci_hcd: invalid port number 15 [ 201.160966][T11614] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 201.265757][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.297373][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.864463][T11645] xt_hashlimit: size too large, truncated to 1048576 [ 202.966875][T11647] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2726'. [ 202.988479][T11651] loop5: detected capacity change from 0 to 512 [ 202.988702][T11651] EXT4-fs: Ignoring removed orlov option [ 202.990777][T11651] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 203.047232][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2717'. [ 203.069555][T11655] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 203.091052][T11651] EXT4-fs error (device loop5): ext4_orphan_get:1390: inode #15: comm syz.5.2718: casefold flag without casefold feature [ 203.159017][T11651] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.2718: couldn't read orphan inode 15 (err -117) [ 203.183893][T11648] xt_socket: unknown flags 0xc [ 203.191321][T11651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.225084][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 203.225104][ T29] audit: type=1400 audit(19231638.539:41779): avc: denied { create } for pid=11650 comm="syz.5.2718" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 203.251860][ T29] audit: type=1400 audit(19231638.539:41780): avc: denied { setattr } for pid=11650 comm="syz.5.2718" name="file0" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 203.273924][ T29] audit: type=1400 audit(19231638.539:41781): avc: denied { write } for pid=11650 comm="syz.5.2718" name="file0" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 203.295822][ T29] audit: type=1400 audit(19231638.539:41782): avc: denied { add_name } for pid=11650 comm="syz.5.2718" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 203.316782][ T29] audit: type=1326 audit(19231638.569:41783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11638 comm="syz.4.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25819fd169 code=0x7ffc0000 [ 203.344538][ T29] audit: type=1326 audit(19231638.569:41784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11638 comm="syz.4.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25819fd169 code=0x7ffc0000 [ 203.376431][T10094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.389585][T11664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2720'. [ 203.409705][T11664] loop0: detected capacity change from 0 to 512 [ 203.417395][T11664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.426144][T11664] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 203.438977][ T29] audit: type=1326 audit(19231638.769:41785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11638 comm="syz.4.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f25819fd169 code=0x7ffc0000 [ 203.504669][ T29] audit: type=1400 audit(19231638.799:41786): avc: denied { tracepoint } for pid=11656 comm="syz.3.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 203.525184][ T29] audit: type=1400 audit(19231638.809:41787): avc: denied { name_connect } for pid=11656 comm="syz.3.2731" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 203.585148][T11672] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(12) [ 203.591881][T11672] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 203.599675][T11672] vhci_hcd vhci_hcd.0: Device attached [ 203.631734][T11671] ip6gretap0 speed is unknown, defaulting to 1000 [ 203.639035][T11677] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 203.658836][T11672] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(14) [ 203.665578][T11672] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 203.673086][T11672] vhci_hcd vhci_hcd.0: Device attached [ 203.746976][T11677] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(20) [ 203.753617][T11677] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 203.761255][T11677] vhci_hcd vhci_hcd.0: Device attached [ 203.834362][T11672] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(18) [ 203.840995][T11672] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 203.848772][T11672] vhci_hcd vhci_hcd.0: Device attached [ 203.865126][ T23] usb 11-2: new low-speed USB device number 2 using vhci_hcd [ 203.900569][T11677] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 203.923640][T11672] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 203.951336][T11667] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 203.957914][T11667] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 203.965493][T11667] vhci_hcd vhci_hcd.0: Device attached [ 203.966419][T11671] lo speed is unknown, defaulting to 1000 [ 203.996660][T11672] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 204.047614][T11688] loop0: detected capacity change from 0 to 512 [ 204.086213][T11688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 204.098270][T11688] EXT4-fs (loop0): orphan cleanup on readonly fs [ 204.109755][T11688] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2723: bg 0: block 248: padding at end of block bitmap is not set [ 204.124637][T11688] Quota error (device loop0): write_blk: dquota write failed [ 204.132088][T11688] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.2723: Failed to acquire dquot type 1 [ 204.144387][T11688] EXT4-fs (loop0): 1 truncate cleaned up [ 204.292182][T11683] vhci_hcd: connection closed [ 204.292619][ T8225] vhci_hcd: stop threads [ 204.301667][ T8225] vhci_hcd: release socket [ 204.306131][ T8225] vhci_hcd: disconnect device [ 204.314908][T11681] vhci_hcd: connection closed [ 204.315827][T11678] vhci_hcd: connection closed [ 204.320902][T11673] vhci_hcd: connection reset by peer [ 204.333320][T11668] vhci_hcd: connection closed [ 204.390758][T11691] loop2: detected capacity change from 0 to 128 [ 204.419141][ T8225] vhci_hcd: stop threads [ 204.423433][ T8225] vhci_hcd: release socket [ 204.428018][ T8225] vhci_hcd: disconnect device [ 204.482004][ T8225] vhci_hcd: stop threads [ 204.486418][ T8225] vhci_hcd: release socket [ 204.490903][ T8225] vhci_hcd: disconnect device [ 204.632458][ T8225] vhci_hcd: stop threads [ 204.636820][ T8225] vhci_hcd: release socket [ 204.641332][ T8225] vhci_hcd: disconnect device [ 204.865753][ T8225] vhci_hcd: stop threads [ 204.870074][ T8225] vhci_hcd: release socket [ 204.874542][ T8225] vhci_hcd: disconnect device [ 204.942832][T11688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.064806][T11696] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.176411][T11702] netlink: 'syz.5.2727': attribute type 10 has an invalid length. [ 205.184361][T11702] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2727'. [ 205.453263][T11702] pim6reg: entered allmulticast mode [ 205.483626][T11696] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.533656][T11703] pim6reg: left allmulticast mode [ 205.595169][T11696] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.687431][T11696] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.808614][T11696] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.846609][T11696] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.873793][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.894240][T11696] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.908459][T11696] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.043434][T11712] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11712 comm=syz.4.2729 [ 206.045443][T11711] loop5: detected capacity change from 0 to 2048 [ 206.076840][T11710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2739'. [ 206.085385][T11711] EXT4-fs: Ignoring removed oldalloc option [ 206.099296][T11710] loop0: detected capacity change from 0 to 512 [ 206.105976][T11710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.115052][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2729'. [ 206.124171][T11710] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 206.142045][T11711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.156185][T11712] macvlan0 (unregistering): left promiscuous mode [ 206.184641][T11715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11715 comm=syz.4.2729 [ 206.289944][T11722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.300724][T11724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2744'. [ 206.339288][T11724] loop0: detected capacity change from 0 to 512 [ 206.347146][T11724] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.354171][T11724] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 206.369975][T11722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.410817][T11728] loop2: detected capacity change from 0 to 128 [ 206.424564][T11722] @: renamed from macsec0 (while UP) [ 206.430938][T11728] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 206.463812][T11726] binfmt_misc: register: failed to install interpreter file ./file2 [ 206.474450][ T8172] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 206.531938][T11733] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2736'. [ 206.624048][T11744] usb usb8: usbfs: process 11744 (syz.2.2737) did not claim interface 0 before use [ 206.648340][T11741] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11741 comm=syz.3.2750 [ 206.712085][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2750'. [ 206.730132][T11741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11741 comm=syz.3.2750 [ 206.755903][T11743] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2738'. [ 206.864060][T11756] loop0: detected capacity change from 0 to 512 [ 206.920273][T11757] netlink: 'syz.3.2742': attribute type 10 has an invalid length. [ 206.928145][T11757] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2742'. [ 206.957563][T11757] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.965812][T11757] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.003094][T11757] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 207.013709][T11757] team0: Failed to send options change via netlink (err -105) [ 207.021334][T11757] team0: Port device geneve1 added [ 207.034453][T11761] pim6reg: entered allmulticast mode [ 207.057956][T11757] pim6reg: left allmulticast mode [ 207.075272][T11756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.089118][T11756] EXT4-fs (loop0): orphan cleanup on readonly fs [ 207.097307][T11756] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2740: bg 0: block 248: padding at end of block bitmap is not set [ 207.140856][T11753] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.168513][T11756] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.2740: Failed to acquire dquot type 1 [ 207.194981][T11756] EXT4-fs (loop0): 1 truncate cleaned up [ 207.298046][T11753] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.393749][T11753] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.433906][T11753] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.483647][T11753] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.535433][T11753] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.753310][T11756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.319880][T11760] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2743'. [ 208.935350][ T23] usb 11-2: enqueue for inactive port 1 [ 208.943163][ T23] usb 11-2: enqueue for inactive port 1 [ 209.015222][ T23] vhci_hcd: vhci_device speed not set [ 209.050671][T10094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.062897][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.087234][T11771] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11771 comm=syz.3.2747 [ 209.134293][T11776] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11776 comm=syz.0.2748 [ 209.211358][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2747'. [ 209.237452][T11781] wireguard0: entered promiscuous mode [ 209.243025][T11781] wireguard0: entered allmulticast mode [ 209.306744][T11785] loop0: detected capacity change from 0 to 512 [ 209.314852][T11785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.334765][T11773] ip6gretap0 speed is unknown, defaulting to 1000 [ 209.365166][T11785] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 209.492294][T11799] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.501430][T11799] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 209.585184][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 209.585252][ T29] audit: type=1400 audit(19231644.909:42001): avc: denied { read write } for pid=11801 comm="syz.4.2756" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 209.616219][ T29] audit: type=1400 audit(19231644.909:42002): avc: denied { open } for pid=11801 comm="syz.4.2756" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 209.666975][T11797] loop0: detected capacity change from 0 to 8192 [ 209.681435][T11780] ip6gretap0 speed is unknown, defaulting to 1000 [ 209.691481][T11773] lo speed is unknown, defaulting to 1000 [ 209.760120][ T29] audit: type=1326 audit(19231645.079:42003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147f1d169 code=0x7ffc0000 [ 209.783663][ T29] audit: type=1326 audit(19231645.079:42004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0147f1d169 code=0x7ffc0000 [ 209.807191][ T29] audit: type=1326 audit(19231645.079:42005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147f1d169 code=0x7ffc0000 [ 209.830634][ T29] audit: type=1326 audit(19231645.079:42006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0147f1d169 code=0x7ffc0000 [ 209.854130][ T29] audit: type=1326 audit(19231645.079:42007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147f1d169 code=0x7ffc0000 [ 209.877718][ T29] audit: type=1326 audit(19231645.079:42008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f0147f1d169 code=0x7ffc0000 [ 209.901224][ T29] audit: type=1326 audit(19231645.079:42009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147f1d169 code=0x7ffc0000 [ 209.924686][ T29] audit: type=1326 audit(19231645.079:42010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.0.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f0147f1d169 code=0x7ffc0000 [ 209.966729][T11803] netlink: 'syz.4.2756': attribute type 13 has an invalid length. [ 209.974991][T11804] loop5: detected capacity change from 0 to 128 [ 210.045527][T11803] lo: entered promiscuous mode [ 210.050439][T11803] lo: entered allmulticast mode [ 210.058486][T11803] tunl0: entered promiscuous mode [ 210.063554][T11803] tunl0: entered allmulticast mode [ 210.075433][T11803] gre0: entered promiscuous mode [ 210.080485][T11803] gre0: entered allmulticast mode [ 210.088892][T11803] gretap0: entered promiscuous mode [ 210.094197][T11803] gretap0: entered allmulticast mode [ 210.103937][T11803] erspan0: entered promiscuous mode [ 210.109291][T11803] erspan0: entered allmulticast mode [ 210.120450][T11803] ip_vti0: entered promiscuous mode [ 210.126046][T11803] ip_vti0: entered allmulticast mode [ 210.132739][T11803] ip6_vti0: entered promiscuous mode [ 210.138357][T11803] ip6_vti0: entered allmulticast mode [ 210.147115][T11803] sit0: entered promiscuous mode [ 210.152084][T11803] sit0: entered allmulticast mode [ 210.154792][T11803] ip6tnl0: entered promiscuous mode [ 210.162443][T11803] ip6tnl0: entered allmulticast mode [ 210.170788][T11803] ip6gre0: entered promiscuous mode [ 210.176106][T11803] ip6gre0: entered allmulticast mode [ 210.195274][T11803] ip6gretap0: entered promiscuous mode [ 210.200861][T11803] ip6gretap0: entered allmulticast mode [ 210.211928][T11803] vcan0: entered promiscuous mode [ 210.217423][T11803] vcan0: entered allmulticast mode [ 210.224078][T11803] bond0: entered promiscuous mode [ 210.229185][T11803] bond_slave_0: entered promiscuous mode [ 210.234928][T11803] bond_slave_1: entered promiscuous mode [ 210.240748][T11803] bond0: entered allmulticast mode [ 210.246020][T11803] bond_slave_0: entered allmulticast mode [ 210.251817][T11803] bond_slave_1: entered allmulticast mode [ 210.258772][T11803] team0: entered allmulticast mode [ 210.263904][T11803] team_slave_0: entered allmulticast mode [ 210.269781][T11803] team_slave_1: entered allmulticast mode [ 210.275684][T11803] bridge1: entered allmulticast mode [ 210.280996][T11803] geneve1: entered allmulticast mode [ 210.286333][T11803] bridge0: entered allmulticast mode [ 210.292531][T11803] dummy0: entered promiscuous mode [ 210.297844][T11803] dummy0: entered allmulticast mode [ 210.304040][T11803] nlmon0: entered promiscuous mode [ 210.309336][T11803] nlmon0: entered allmulticast mode [ 210.316975][T11803] caif0: entered promiscuous mode [ 210.322045][T11803] caif0: entered allmulticast mode [ 210.327826][T11803] batadv0: entered promiscuous mode [ 210.333052][T11803] batadv0: entered allmulticast mode [ 210.339893][T11803] vxcan0: entered promiscuous mode [ 210.345177][T11803] vxcan0: entered allmulticast mode [ 210.348466][T11811] syz.5.2745: attempt to access beyond end of device [ 210.348466][T11811] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 210.351152][T11803] vxcan1: entered promiscuous mode [ 210.369546][T11803] vxcan1: entered allmulticast mode [ 210.386484][T11803] veth0: entered promiscuous mode [ 210.388265][T11807] __nla_validate_parse: 2 callbacks suppressed [ 210.388291][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2758'. [ 210.391536][T11803] veth0: entered allmulticast mode [ 210.391798][T11803] veth1: entered promiscuous mode [ 210.416888][T11803] veth1: entered allmulticast mode [ 210.424150][T11803] wg0: entered promiscuous mode [ 210.429132][T11803] wg0: entered allmulticast mode [ 210.434607][T11803] wg1: entered promiscuous mode [ 210.439542][T11803] wg1: entered allmulticast mode [ 210.445297][T11803] wg2: entered promiscuous mode [ 210.450271][T11803] wg2: entered allmulticast mode [ 210.456190][T11803] veth0_to_bridge: entered promiscuous mode [ 210.462118][T11803] veth0_to_bridge: entered allmulticast mode [ 210.468686][T11803] bridge_slave_0: entered promiscuous mode [ 210.474532][T11803] bridge_slave_0: entered allmulticast mode [ 210.481037][T11803] veth0_to_bond: entered promiscuous mode [ 210.486904][T11803] veth0_to_bond: entered allmulticast mode [ 210.493651][T11803] veth1_to_bond: entered promiscuous mode [ 210.499452][T11803] veth1_to_bond: entered allmulticast mode [ 210.505914][T11803] veth0_to_team: entered promiscuous mode [ 210.511697][T11803] veth0_to_team: entered allmulticast mode [ 210.518442][T11803] veth1_to_team: entered promiscuous mode [ 210.519805][T11804] syz.5.2745: attempt to access beyond end of device [ 210.519805][T11804] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 210.524191][T11803] veth1_to_team: entered allmulticast mode [ 210.544599][T11803] veth0_to_batadv: entered promiscuous mode [ 210.550748][T11803] veth0_to_batadv: entered allmulticast mode [ 210.557235][T11803] batadv_slave_0: entered promiscuous mode [ 210.563170][T11803] batadv_slave_0: entered allmulticast mode [ 210.569490][T11803] veth1_to_batadv: entered promiscuous mode [ 210.575560][T11803] veth1_to_batadv: entered allmulticast mode [ 210.581851][T11803] batadv_slave_1: entered allmulticast mode [ 210.588140][T11803] xfrm0: entered promiscuous mode [ 210.593278][T11803] xfrm0: entered allmulticast mode [ 210.598800][T11803] veth0_to_hsr: entered promiscuous mode [ 210.604445][T11803] veth0_to_hsr: entered allmulticast mode [ 210.610433][T11803] hsr_slave_0: entered allmulticast mode [ 210.616469][T11803] veth1_to_hsr: entered promiscuous mode [ 210.622142][T11803] veth1_to_hsr: entered allmulticast mode [ 210.628216][T11803] hsr_slave_1: entered allmulticast mode [ 210.634169][T11803] hsr0: entered promiscuous mode [ 210.639180][T11803] hsr0: entered allmulticast mode [ 210.644421][T11803] veth1_virt_wifi: entered promiscuous mode [ 210.650380][T11803] veth1_virt_wifi: entered allmulticast mode [ 210.656759][T11803] veth0_virt_wifi: entered promiscuous mode [ 210.662696][T11803] veth0_virt_wifi: entered allmulticast mode [ 210.669188][T11803] geneve0: entered promiscuous mode [ 210.674418][T11803] geneve0: entered allmulticast mode [ 210.680254][T11803] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.688824][T11803] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.697207][T11803] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.705625][T11803] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.715370][T11803] veth1.1: entered promiscuous mode [ 210.720681][T11803] veth1.1: entered allmulticast mode [ 210.726257][T11803] hsr1: entered promiscuous mode [ 210.731299][T11803] hsr1: entered allmulticast mode [ 210.737480][T11803] bond1: entered promiscuous mode [ 210.742544][T11803] bond1: entered allmulticast mode [ 210.747918][T11803] xfrm1: entered promiscuous mode [ 210.752962][T11803] xfrm1: entered allmulticast mode [ 210.759484][T11803] veth2: entered promiscuous mode [ 210.764556][T11803] veth2: entered allmulticast mode [ 210.771494][T11803] veth3: entered promiscuous mode [ 210.776578][T11803] veth3: entered allmulticast mode [ 210.781920][T11803] veth4: entered promiscuous mode [ 210.787020][T11803] veth4: entered allmulticast mode [ 210.792389][T11803] veth5: entered promiscuous mode [ 210.797540][T11803] veth5: entered allmulticast mode [ 210.802895][T11803] netdevsim netdevsim4 eth0: entered promiscuous mode [ 210.809714][T11803] netdevsim netdevsim4 eth0: entered allmulticast mode [ 210.816953][T11803] netdevsim netdevsim4 eth1: entered promiscuous mode [ 210.823727][T11803] netdevsim netdevsim4 eth1: entered allmulticast mode [ 210.830898][T11803] netdevsim netdevsim4 eth2: entered promiscuous mode [ 210.837749][T11803] netdevsim netdevsim4 eth2: entered allmulticast mode [ 210.844874][T11803] netdevsim netdevsim4 eth3: entered promiscuous mode [ 210.851677][T11803] netdevsim netdevsim4 eth3: entered allmulticast mode [ 210.858821][T11803] bond2: entered promiscuous mode [ 210.863872][T11803] gretap1: entered promiscuous mode [ 210.869195][T11803] bond2: entered allmulticast mode [ 210.874319][T11803] gretap1: entered allmulticast mode [ 210.884477][T11803] syztnl0: entered promiscuous mode [ 210.889754][T11803] syztnl0: entered allmulticast mode [ 210.897645][T11780] lo speed is unknown, defaulting to 1000 [ 210.904065][T11807] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 210.963885][T11818] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11818 comm=syz.3.2769 [ 211.021780][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2769'. [ 211.071685][T11818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11818 comm=syz.3.2769 [ 211.128719][T11824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11824 comm=syz.5.2761 [ 211.183400][T11826] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11826 comm=syz.0.2762 [ 211.256941][T11831] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2763'. [ 211.294317][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2762'. [ 211.362682][T11837] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2765'. [ 211.388801][T11837] loop5: detected capacity change from 0 to 512 [ 211.404614][T11837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.428647][T11837] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 211.438974][T11841] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2766'. [ 211.455759][T11843] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11843 comm=syz.0.2777 [ 211.533569][T11841] pimreg12: entered allmulticast mode [ 211.548567][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2777'. [ 211.595605][T11843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11843 comm=syz.0.2777 [ 211.612579][T11854] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11854 comm=syz.2.2760 [ 211.667573][T11848] ip6gretap0 speed is unknown, defaulting to 1000 [ 211.709646][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2760'. [ 211.792546][T11860] netlink: 'syz.0.2771': attribute type 13 has an invalid length. [ 211.815726][T11860] lo: entered promiscuous mode [ 211.820680][T11860] lo: entered allmulticast mode [ 211.836187][T11860] tunl0: entered promiscuous mode [ 211.841278][T11860] tunl0: entered allmulticast mode [ 211.895755][T11860] gre0: entered promiscuous mode [ 211.900820][T11860] gre0: entered allmulticast mode [ 211.913257][T11860] 0ªX¹¦D: entered promiscuous mode [ 211.918447][T11860] 0ªX¹¦D: entered allmulticast mode [ 211.927173][T11860] erspan0: entered promiscuous mode [ 211.932419][T11860] erspan0: entered allmulticast mode [ 211.941681][T11860] ip_vti0: entered promiscuous mode [ 211.946990][T11860] ip_vti0: entered allmulticast mode [ 211.953233][T11860] ip6_vti0: entered promiscuous mode [ 211.958575][T11860] ip6_vti0: entered allmulticast mode [ 211.964478][T11865] netlink: 'syz.5.2768': attribute type 13 has an invalid length. [ 211.965234][T11860] sit0: entered promiscuous mode [ 211.977334][T11860] sit0: entered allmulticast mode [ 211.984794][T11860] ip6tnl0: entered promiscuous mode [ 211.990040][T11860] ip6tnl0: entered allmulticast mode [ 211.996458][T11860] ip6gre0: entered promiscuous mode [ 212.001692][T11860] ip6gre0: entered allmulticast mode [ 212.009363][T11860] ip6gretap0: entered promiscuous mode [ 212.014872][T11860] ip6gretap0: entered allmulticast mode [ 212.024646][T11860] vcan0: entered promiscuous mode [ 212.029861][T11860] vcan0: entered allmulticast mode [ 212.035817][T11860] team0: entered promiscuous mode [ 212.040848][T11860] team_slave_0: entered promiscuous mode [ 212.046685][T11860] team_slave_1: entered promiscuous mode [ 212.052371][T11860] geneve1: entered promiscuous mode [ 212.057721][T11860] team0: entered allmulticast mode [ 212.063051][T11860] team_slave_0: entered allmulticast mode [ 212.068889][T11860] team_slave_1: entered allmulticast mode [ 212.074682][T11860] geneve1: entered allmulticast mode [ 212.079404][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2768'. [ 212.081450][T11860] dummy0: entered promiscuous mode [ 212.094000][T11860] dummy0: entered allmulticast mode [ 212.100292][T11860] nlmon0: entered promiscuous mode [ 212.105568][T11860] nlmon0: entered allmulticast mode [ 212.111427][T11860] caif0: entered promiscuous mode [ 212.116514][T11860] caif0: entered allmulticast mode [ 212.121929][T11860] batadv0: entered promiscuous mode [ 212.127212][T11860] batadv0: entered allmulticast mode [ 212.132725][T11860] vxcan0: entered promiscuous mode [ 212.138051][T11860] vxcan0: entered allmulticast mode [ 212.143511][T11860] vxcan1: entered promiscuous mode [ 212.148678][T11860] vxcan1: entered allmulticast mode [ 212.154076][T11860] veth0: entered promiscuous mode [ 212.159180][T11860] veth0: entered allmulticast mode [ 212.164585][T11860] veth1: entered promiscuous mode [ 212.169667][T11860] veth1: entered allmulticast mode [ 212.175169][T11860] wg0: entered promiscuous mode [ 212.180061][T11860] wg0: entered allmulticast mode [ 212.185410][T11860] wg1: entered promiscuous mode [ 212.190428][T11860] wg1: entered allmulticast mode [ 212.196732][T11860] veth0_to_bridge: entered promiscuous mode [ 212.202681][T11860] veth0_to_bridge: entered allmulticast mode [ 212.208912][T11860] bridge_slave_0: entered promiscuous mode [ 212.214740][T11860] bridge_slave_0: entered allmulticast mode [ 212.221035][T11860] veth0_to_bond: entered promiscuous mode [ 212.226812][T11860] veth0_to_bond: entered allmulticast mode [ 212.232779][T11860] bond_slave_0: entered promiscuous mode [ 212.238633][T11860] bond_slave_0: entered allmulticast mode [ 212.244711][T11860] veth1_to_bond: entered promiscuous mode [ 212.250487][T11860] veth1_to_bond: entered allmulticast mode [ 212.256653][T11860] bond_slave_1: entered promiscuous mode [ 212.262313][T11860] bond_slave_1: entered allmulticast mode [ 212.268397][T11860] veth0_to_team: entered promiscuous mode [ 212.274196][T11860] veth0_to_team: entered allmulticast mode [ 212.280453][T11860] veth1_to_team: entered promiscuous mode [ 212.286611][T11860] veth1_to_team: entered allmulticast mode [ 212.292876][T11860] veth0_to_batadv: entered promiscuous mode [ 212.299112][T11860] veth0_to_batadv: entered allmulticast mode [ 212.305457][T11860] batadv_slave_0: entered promiscuous mode [ 212.311280][T11860] batadv_slave_0: entered allmulticast mode [ 212.317427][T11860] veth1_to_batadv: entered promiscuous mode [ 212.323335][T11860] veth1_to_batadv: entered allmulticast mode [ 212.329638][T11860] batadv_slave_1: entered allmulticast mode [ 212.335789][T11860] xfrm0: entered promiscuous mode [ 212.340826][T11860] xfrm0: entered allmulticast mode [ 212.346297][T11860] veth0_to_hsr: entered promiscuous mode [ 212.351956][T11860] veth0_to_hsr: entered allmulticast mode [ 212.358006][T11860] hsr_slave_0: entered promiscuous mode [ 212.363577][T11860] hsr_slave_0: entered allmulticast mode [ 212.369608][T11860] veth1_to_hsr: entered allmulticast mode [ 212.377860][T11860] hsr_slave_1: entered promiscuous mode [ 212.383434][T11860] hsr_slave_1: entered allmulticast mode [ 212.389476][T11860] veth1_virt_wifi: entered promiscuous mode [ 212.395423][T11860] veth1_virt_wifi: entered allmulticast mode [ 212.401648][T11860] veth0_virt_wifi: entered promiscuous mode [ 212.407595][T11860] veth0_virt_wifi: entered allmulticast mode [ 212.414029][T11860] veth1_macvtap: entered allmulticast mode [ 212.420208][T11860] veth0_macvtap: entered allmulticast mode [ 212.426415][T11860] macvtap0: entered promiscuous mode [ 212.431791][T11860] macvtap0: entered allmulticast mode [ 212.439935][T11860] macsec0: entered promiscuous mode [ 212.445185][T11860] macsec0: entered allmulticast mode [ 212.450777][T11860] geneve0: entered promiscuous mode [ 212.456092][T11860] geneve0: entered allmulticast mode [ 212.461932][T11860] hsr0: entered promiscuous mode [ 212.466944][T11860] hsr0: entered allmulticast mode [ 212.472244][T11860] pimreg12: entered promiscuous mode [ 212.480409][T11860] veth2: entered promiscuous mode [ 212.485506][T11860] veth2: entered allmulticast mode [ 212.499225][T11873] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.508321][T11860] veth3: entered promiscuous mode [ 212.513422][T11860] veth3: entered allmulticast mode [ 212.518794][T11873] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 212.538306][T11860] veth4: entered promiscuous mode [ 212.543422][T11860] veth4: entered allmulticast mode [ 212.559435][T11860] veth5: entered promiscuous mode [ 212.564510][T11860] veth5: entered allmulticast mode [ 212.592036][T11860] veth6: entered promiscuous mode [ 212.597235][T11860] veth6: entered allmulticast mode [ 212.640702][T11860] veth7: entered promiscuous mode [ 212.645842][T11860] veth7: entered allmulticast mode [ 212.657212][T11860] ip6tnl1: entered promiscuous mode [ 212.662460][T11860] ip6tnl1: entered allmulticast mode [ 212.675305][T11860] netdevsim netdevsim0 eth0: entered promiscuous mode [ 212.682138][T11860] netdevsim netdevsim0 eth0: entered allmulticast mode [ 212.693780][T11860] netdevsim netdevsim0 eth1: entered promiscuous mode [ 212.700747][T11860] netdevsim netdevsim0 eth1: entered allmulticast mode [ 212.715321][T11860] netdevsim netdevsim0 eth2: entered promiscuous mode [ 212.722156][T11860] netdevsim netdevsim0 eth2: entered allmulticast mode [ 212.739737][T11860] netdevsim netdevsim0 eth3: entered promiscuous mode [ 212.746573][T11860] netdevsim netdevsim0 eth3: entered allmulticast mode [ 212.765275][T11860] erspan1: entered promiscuous mode [ 212.770661][T11860] erspan1: entered allmulticast mode [ 212.776549][T11860] bond0: entered promiscuous mode [ 212.781611][T11860] gretap0: entered promiscuous mode [ 212.786970][T11860] bond0: entered allmulticast mode [ 212.792103][T11860] gretap0: entered allmulticast mode [ 212.821497][T11865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.956517][T11883] loop0: detected capacity change from 0 to 512 [ 212.991935][T11877] wireguard0: entered promiscuous mode [ 212.996489][T11883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.997498][T11877] wireguard0: entered allmulticast mode [ 213.108908][T11848] lo speed is unknown, defaulting to 1000 [ 213.178398][T11875] ip6gretap0 speed is unknown, defaulting to 1000 [ 213.348299][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.488029][T11885] ip6gretap0 speed is unknown, defaulting to 1000 [ 213.521333][T11894] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2776'. [ 213.554382][T11898] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11898 comm=syz.4.2778 [ 213.657639][T11901] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11901 comm=syz.4.2779 [ 213.717010][T11890] loop2: detected capacity change from 0 to 128 [ 213.736183][T11903] loop5: detected capacity change from 0 to 512 [ 213.742805][T11903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.757310][T11903] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 213.774107][T11875] lo speed is unknown, defaulting to 1000 [ 213.783565][T11910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11910 comm=syz.4.2783 [ 213.880162][T11915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11915 comm=syz.4.2783 [ 213.887995][T11911] usb usb8: usbfs: process 11911 (syz.0.2781) did not claim interface 0 before use [ 213.903913][T11914] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.100902][T11896] syz.2.2774: attempt to access beyond end of device [ 214.100902][T11896] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 214.160131][T11896] syz.2.2774: attempt to access beyond end of device [ 214.160131][T11896] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 214.179021][T11885] lo speed is unknown, defaulting to 1000 [ 214.846282][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 214.846299][ T29] audit: type=1326 audit(19231650.179:42145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b32bd169 code=0x7ffc0000 [ 214.851485][T11933] loop2: detected capacity change from 0 to 2048 [ 214.856745][ T29] audit: type=1326 audit(19231650.179:42146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b32bd169 code=0x7ffc0000 [ 214.905919][ T29] audit: type=1326 audit(19231650.179:42147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75b32bd169 code=0x7ffc0000 [ 214.929463][ T29] audit: type=1326 audit(19231650.179:42148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b32bd169 code=0x7ffc0000 [ 214.953035][ T29] audit: type=1326 audit(19231650.179:42149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b32bd169 code=0x7ffc0000 [ 214.976614][ T29] audit: type=1326 audit(19231650.179:42150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f75b32bd169 code=0x7ffc0000 [ 215.000137][ T29] audit: type=1326 audit(19231650.179:42151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b32bd169 code=0x7ffc0000 [ 215.024823][ T29] audit: type=1326 audit(19231650.209:42152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11921 comm="syz.4.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25819fd169 code=0x7ffc0000 [ 215.036497][T11929] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.048410][ T29] audit: type=1326 audit(19231650.209:42153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11921 comm="syz.4.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25819fd169 code=0x7ffc0000 [ 215.080640][T11929] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 215.089098][ T29] audit: type=1326 audit(19231650.289:42154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75b32bd169 code=0x7ffc0000 [ 215.127087][T11932] futex_wake_op: syz.5.2789 tries to shift op by -1; fix this program [ 215.128323][T11933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.339396][T11950] team0: Port device team_slave_0 removed [ 215.364302][T11950] team0: Port device team_slave_1 removed [ 215.371816][T11950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.381834][T11950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.393578][T11950] team0: Port device geneve1 removed [ 215.417722][T11950] bond0: (slave gretap0): Releasing active interface [ 215.458993][T11956] usb usb8: usbfs: process 11956 (syz.5.2796) did not claim interface 0 before use [ 215.741554][T11966] wireguard0: entered promiscuous mode [ 215.747100][T11966] wireguard0: entered allmulticast mode [ 215.826920][T11970] ip6gretap0 speed is unknown, defaulting to 1000 [ 215.915448][T11970] lo speed is unknown, defaulting to 1000 [ 215.998209][T11977] netlink: 'syz.4.2799': attribute type 21 has an invalid length. [ 216.006205][T11977] netlink: 'syz.4.2799': attribute type 1 has an invalid length. [ 216.014106][T11977] __nla_validate_parse: 6 callbacks suppressed [ 216.014120][T11977] netlink: 16050 bytes leftover after parsing attributes in process `syz.4.2799'. [ 216.221463][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.331122][T11987] selinux_netlink_send: 2 callbacks suppressed [ 216.331137][T11987] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11987 comm=syz.5.2803 [ 216.395427][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2803'. [ 216.479089][T11987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11987 comm=syz.5.2803 [ 216.717145][T11998] loop5: detected capacity change from 0 to 512 [ 216.730446][T11998] /dev/loop5: Can't open blockdev [ 216.791758][T12000] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2805'. [ 217.449822][T12010] SELinux: failed to load policy [ 217.515549][T11998] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2806'. [ 217.870630][T12016] loop2: detected capacity change from 0 to 764 [ 217.965997][T12014] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2810'. [ 218.008246][T12019] netlink: 'syz.0.2820': attribute type 10 has an invalid length. [ 218.016193][T12019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2820'. [ 218.086902][T12019] geneve1: left promiscuous mode [ 218.091884][T12019] geneve1: left allmulticast mode [ 218.129141][T12019] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.137400][T12019] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.216082][T12019] geneve1: entered promiscuous mode [ 218.221552][T12019] geneve1: entered allmulticast mode [ 218.239434][T12019] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 218.259232][T12019] team0: Failed to send options change via netlink (err -105) [ 218.266884][T12019] team0: Port device geneve1 added [ 218.343499][T12020] pim6reg: entered allmulticast mode [ 218.358750][T12015] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.435094][T12021] pim6reg: left allmulticast mode [ 218.479586][T12015] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.616710][T12015] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.692220][T12015] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.731122][T12015] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.744956][T12015] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.291006][T12026] bond0: (slave bond_slave_0): Releasing backup interface [ 219.301842][T12026] bond0: (slave bond_slave_1): Releasing backup interface [ 219.311581][T12030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2822'. [ 219.320678][T12030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2822'. [ 219.330964][T12030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2822'. [ 219.342328][T12026] team0: Port device team_slave_0 removed [ 219.362494][T12026] team0: Port device team_slave_1 removed [ 219.385447][T12026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.405570][T12026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.421801][T12030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2822'. [ 219.421841][T12026] team0: Port device geneve1 removed [ 219.463910][T12026] team0: Port device bridge1 removed [ 219.470055][T12026] bond2: (slave gretap1): Releasing active interface [ 219.499260][T12026] team0: Port device bridge0 removed [ 219.515464][ T3458] srz1: Port: 1 Link DOWN [ 219.667087][T12045] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12045 comm=syz.4.2817 [ 219.722563][T12045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12045 comm=syz.4.2817 [ 219.925080][T12053] wireguard0: entered promiscuous mode [ 219.930629][T12053] wireguard0: entered allmulticast mode [ 219.951039][T12051] ip6gretap0 speed is unknown, defaulting to 1000 [ 220.008047][T12057] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12057 comm=syz.3.2830 [ 220.020830][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 220.020844][ T29] audit: type=1400 audit(19231655.339:42476): avc: denied { write } for pid=12050 comm="syz.5.2811" name="dev_mcast" dev="proc" ino=4026533484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 220.078318][T12057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12057 comm=syz.3.2830 [ 220.181678][T12051] lo speed is unknown, defaulting to 1000 [ 220.305696][T12059] loop2: detected capacity change from 0 to 256 [ 220.321922][T12059] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 220.325100][ T29] audit: type=1400 audit(19231655.649:42477): avc: denied { mounton } for pid=12058 comm="syz.2.2818" path="/622/file0" dev="tmpfs" ino=3368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 220.387304][T12059] netlink: 'syz.2.2818': attribute type 21 has an invalid length. [ 220.395255][ T29] audit: type=1400 audit(19231655.689:42478): avc: denied { mount } for pid=12058 comm="syz.2.2818" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 220.395299][T12059] netlink: 'syz.2.2818': attribute type 1 has an invalid length. [ 220.605943][ T29] audit: type=1400 audit(19231655.939:42479): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 220.670391][T12067] netlink: 'syz.0.2824': attribute type 1 has an invalid length. [ 220.680893][ T29] audit: type=1400 audit(19231655.969:42480): avc: denied { mac_admin } for pid=12065 comm="syz.4.2823" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 220.692942][T12069] pimreg12: entered allmulticast mode [ 220.702114][ T29] audit: type=1400 audit(19231655.969:42481): avc: denied { relabelto } for pid=12065 comm="syz.4.2823" name="cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 220.734678][ T29] audit: type=1400 audit(19231655.969:42482): avc: denied { associate } for pid=12065 comm="syz.4.2823" name="cgroup.procs" dev="cgroup" ino=200 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:net_conf_t:s0" [ 220.762712][ T29] audit: type=1326 audit(19231655.969:42483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.4.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25819fd169 code=0x7ffc0000 [ 220.786313][ T29] audit: type=1326 audit(19231655.969:42484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.4.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25819fd169 code=0x7ffc0000 [ 220.809845][ T29] audit: type=1326 audit(19231655.969:42485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12065 comm="syz.4.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f25819fd169 code=0x7ffc0000 [ 220.998046][T12082] usb usb8: usbfs: process 12082 (syz.4.2826) did not claim interface 0 before use [ 221.139055][T12076] netlink: 'syz.5.2832': attribute type 13 has an invalid length. [ 221.156147][T12076] lo: entered promiscuous mode [ 221.161067][T12076] lo: entered allmulticast mode [ 221.222845][T12076] tunl0: entered promiscuous mode [ 221.228108][T12076] tunl0: entered allmulticast mode [ 221.266710][T12076] gre0: entered promiscuous mode [ 221.271708][T12076] gre0: entered allmulticast mode [ 221.295948][T12095] usb usb8: usbfs: process 12095 (syz.2.2840) did not claim interface 0 before use [ 221.317540][T12076] gretap0: entered promiscuous mode [ 221.322854][T12076] gretap0: entered allmulticast mode [ 221.388221][T12099] SELinux: failed to load policy [ 221.397438][T12076] erspan0: entered promiscuous mode [ 221.402748][T12076] erspan0: entered allmulticast mode [ 221.415414][T12076] ip_vti0: entered promiscuous mode [ 221.420770][T12076] ip_vti0: entered allmulticast mode [ 221.433403][T12076] ip6_vti0: entered promiscuous mode [ 221.438807][T12076] ip6_vti0: entered allmulticast mode [ 221.498576][T12076] sit0: entered promiscuous mode [ 221.503705][T12076] sit0: entered allmulticast mode [ 221.544644][T12076] ip6tnl0: entered promiscuous mode [ 221.550040][T12076] ip6tnl0: entered allmulticast mode [ 221.592949][T12076] ip6gre0: entered promiscuous mode [ 221.598265][T12076] ip6gre0: entered allmulticast mode [ 221.612931][T12076] ip6gretap0: entered promiscuous mode [ 221.618633][T12076] ip6gretap0: entered allmulticast mode [ 221.639020][T12084] __nla_validate_parse: 13 callbacks suppressed [ 221.639049][T12084] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2827'. [ 221.642550][T12076] vcan0: entered promiscuous mode [ 221.659496][T12076] vcan0: entered allmulticast mode [ 221.665754][T12076] bond0: entered promiscuous mode [ 221.670878][T12076] bond_slave_0: entered promiscuous mode [ 221.676760][T12076] bond_slave_1: entered promiscuous mode [ 221.682605][T12076] bond0: entered allmulticast mode [ 221.687808][T12076] bond_slave_0: entered allmulticast mode [ 221.693608][T12076] bond_slave_1: entered allmulticast mode [ 221.702886][T12076] team0: entered promiscuous mode [ 221.708006][T12076] team_slave_0: entered promiscuous mode [ 221.713898][T12076] team_slave_1: entered promiscuous mode [ 221.719722][T12076] geneve1: entered promiscuous mode [ 221.725231][T12076] bridge0: entered promiscuous mode [ 221.730626][T12076] team0: entered allmulticast mode [ 221.735835][T12076] team_slave_0: entered allmulticast mode [ 221.741625][T12076] team_slave_1: entered allmulticast mode [ 221.747533][T12076] geneve1: entered allmulticast mode [ 221.752898][T12076] bridge0: entered allmulticast mode [ 221.760242][T12076] dummy0: entered promiscuous mode [ 221.765468][T12076] dummy0: entered allmulticast mode [ 221.847754][T12076] nlmon0: entered promiscuous mode [ 221.853011][T12076] nlmon0: entered allmulticast mode [ 221.870359][T12076] caif0: entered promiscuous mode [ 221.877157][T12076] caif0: entered allmulticast mode [ 221.907385][T12076] batadv0: entered promiscuous mode [ 221.912642][T12076] batadv0: entered allmulticast mode [ 221.949784][T12076] vxcan0: entered promiscuous mode [ 221.954968][T12076] vxcan0: entered allmulticast mode [ 222.003994][T12076] vxcan1: entered promiscuous mode [ 222.009225][T12076] vxcan1: entered allmulticast mode [ 222.052938][T12076] veth0: entered promiscuous mode [ 222.058132][T12076] veth0: entered allmulticast mode [ 222.098843][T12076] veth1: entered promiscuous mode [ 222.103927][T12076] veth1: entered allmulticast mode [ 222.120334][T12076] wg0: entered promiscuous mode [ 222.125615][T12076] wg0: entered allmulticast mode [ 222.157155][T12076] wg1: entered promiscuous mode [ 222.162079][T12076] wg1: entered allmulticast mode [ 222.188797][T12076] wg2: entered promiscuous mode [ 222.193701][T12076] wg2: entered allmulticast mode [ 222.226613][T12076] veth0_to_bridge: entered promiscuous mode [ 222.232630][T12076] veth0_to_bridge: entered allmulticast mode [ 222.280689][T12076] bridge_slave_0: entered promiscuous mode [ 222.286727][T12076] bridge_slave_0: entered allmulticast mode [ 222.313670][T12076] veth1_to_bridge: entered promiscuous mode [ 222.319903][T12076] veth1_to_bridge: entered allmulticast mode [ 222.347181][T12076] bridge_slave_1: entered promiscuous mode [ 222.353059][T12076] bridge_slave_1: entered allmulticast mode [ 222.371236][T12076] veth0_to_bond: entered promiscuous mode [ 222.377190][T12076] veth0_to_bond: entered allmulticast mode [ 222.400694][T12076] veth1_to_bond: entered promiscuous mode [ 222.406824][T12076] veth1_to_bond: entered allmulticast mode [ 222.414933][T12076] veth0_to_team: entered promiscuous mode [ 222.420765][T12076] veth0_to_team: entered allmulticast mode [ 222.430267][T12076] veth1_to_team: entered promiscuous mode [ 222.436213][T12076] veth1_to_team: entered allmulticast mode [ 222.445770][T12076] veth0_to_batadv: entered promiscuous mode [ 222.451706][T12076] veth0_to_batadv: entered allmulticast mode [ 222.459735][T12076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.467206][T12076] batadv_slave_0: entered promiscuous mode [ 222.473108][T12076] batadv_slave_0: entered allmulticast mode [ 222.481118][T12076] veth1_to_batadv: entered promiscuous mode [ 222.487085][T12076] veth1_to_batadv: entered allmulticast mode [ 222.494755][T12076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.502930][T12076] batadv_slave_1: entered promiscuous mode [ 222.508804][T12076] batadv_slave_1: entered allmulticast mode [ 222.516625][T12076] xfrm0: entered promiscuous mode [ 222.521697][T12076] xfrm0: entered allmulticast mode [ 222.528508][T12076] veth0_to_hsr: entered promiscuous mode [ 222.534170][T12076] veth0_to_hsr: entered allmulticast mode [ 222.541997][T12076] hsr_slave_0: entered allmulticast mode [ 222.549014][T12076] veth1_to_hsr: entered promiscuous mode [ 222.554717][T12076] veth1_to_hsr: entered allmulticast mode [ 222.562450][T12076] hsr_slave_1: entered allmulticast mode [ 222.569695][T12076] hsr0: entered promiscuous mode [ 222.574705][T12076] hsr0: entered allmulticast mode [ 222.581631][T12076] veth1_virt_wifi: entered promiscuous mode [ 222.587644][T12076] veth1_virt_wifi: entered allmulticast mode [ 222.594957][T12076] veth0_virt_wifi: entered promiscuous mode [ 222.601097][T12076] veth0_virt_wifi: entered allmulticast mode [ 222.608931][T12076] veth1_macvtap: entered allmulticast mode [ 222.616412][T12076] veth0_macvtap: entered allmulticast mode [ 222.623866][T12076] macvtap0: entered promiscuous mode [ 222.629347][T12076] macvtap0: entered allmulticast mode [ 222.639062][T12076] @: entered promiscuous mode [ 222.643782][T12076] @: entered allmulticast mode [ 222.650244][T12076] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.658665][T12076] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.667284][T12076] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.675738][T12076] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.684845][T12076] geneve0: entered promiscuous mode [ 222.690162][T12076] geneve0: entered allmulticast mode [ 222.697657][T12076] veth2: entered promiscuous mode [ 222.702720][T12076] veth2: entered allmulticast mode [ 222.708473][T12076] veth3: entered promiscuous mode [ 222.713577][T12076] veth3: entered allmulticast mode [ 222.719937][T12076] pimreg12: entered promiscuous mode [ 222.725765][T12076] erspan1: entered promiscuous mode [ 222.731047][T12076] erspan1: entered allmulticast mode [ 222.737241][T12076] bond1: entered promiscuous mode [ 222.742290][T12076] gretap1: entered promiscuous mode [ 222.747744][T12076] bond1: entered allmulticast mode [ 222.752879][T12076] gretap1: entered allmulticast mode [ 222.764100][T12076] netdevsim netdevsim5 eth0: entered promiscuous mode [ 222.771027][T12076] netdevsim netdevsim5 eth0: entered allmulticast mode [ 222.778706][T12076] netdevsim netdevsim5 eth1: entered promiscuous mode [ 222.785562][T12076] netdevsim netdevsim5 eth1: entered allmulticast mode [ 222.792849][T12076] netdevsim netdevsim5 eth2: entered promiscuous mode [ 222.799887][T12076] netdevsim netdevsim5 eth2: entered allmulticast mode [ 222.807600][T12076] netdevsim netdevsim5 eth3: entered promiscuous mode [ 222.814395][T12076] netdevsim netdevsim5 eth3: entered allmulticast mode [ 223.034715][T12115] loop2: detected capacity change from 0 to 256 [ 223.035315][T12118] usb usb8: usbfs: process 12118 (syz.4.2847) did not claim interface 0 before use [ 223.725899][ T3310] block device autoloading is deprecated and will be removed. [ 223.882088][T12124] bond3: entered promiscuous mode [ 223.887313][T12124] bond3: entered allmulticast mode [ 223.904623][T12124] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.938146][T12124] bond3 (unregistering): Released all slaves [ 223.987004][T12127] loop5: detected capacity change from 0 to 256 [ 224.022162][T12127] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 224.058646][T12127] netlink: 'syz.5.2835': attribute type 21 has an invalid length. [ 224.066558][T12127] netlink: 'syz.5.2835': attribute type 1 has an invalid length. [ 224.074317][T12127] netlink: 16050 bytes leftover after parsing attributes in process `syz.5.2835'. [ 224.212576][T12136] loop2: detected capacity change from 0 to 128 [ 224.219186][T12140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2854'. [ 224.275360][T12142] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12142 comm=syz.3.2857 [ 224.319127][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2857'. [ 224.416831][T12152] ip6gretap0 speed is unknown, defaulting to 1000 [ 224.547106][T12152] lo speed is unknown, defaulting to 1000 [ 224.793347][T12152] loop2: detected capacity change from 0 to 128 [ 224.804158][T12172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.810059][T12169] ip6gretap0 speed is unknown, defaulting to 1000 [ 224.825822][T12171] bond0: (slave bond_slave_0): Releasing backup interface [ 224.840663][T12172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.850834][T12171] bond0: (slave bond_slave_1): Releasing backup interface [ 224.907208][T12171] team0: Port device team_slave_0 removed [ 224.914124][T12171] team0: Port device team_slave_1 removed [ 224.921902][T12171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.929848][T12171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.939039][T12171] team0: Port device geneve1 removed [ 224.945272][T12171] bond1: (slave gretap1): Releasing active interface [ 224.953649][T12171] team0: Port device bridge0 removed [ 224.992306][T12169] lo speed is unknown, defaulting to 1000 [ 225.035763][ T29] kauditd_printk_skb: 632 callbacks suppressed [ 225.035779][ T29] audit: type=1400 audit(19231660.369:43118): avc: denied { allowed } for pid=12175 comm="syz.3.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 225.056309][T12155] syz.2.2841: attempt to access beyond end of device [ 225.056309][T12155] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 225.081553][ T29] audit: type=1400 audit(19231660.369:43119): avc: denied { create } for pid=12175 comm="syz.3.2848" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 225.102964][ T29] audit: type=1400 audit(19231660.369:43120): avc: denied { map } for pid=12175 comm="syz.3.2848" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 225.127254][ T29] audit: type=1400 audit(19231660.369:43121): avc: denied { read write } for pid=12175 comm="syz.3.2848" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 225.137275][T12179] netlink: 'syz.3.2848': attribute type 13 has an invalid length. [ 225.156889][ T29] audit: type=1400 audit(19231660.409:43122): avc: denied { open } for pid=12175 comm="syz.3.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 225.179350][ T29] audit: type=1400 audit(19231660.409:43123): avc: denied { kernel } for pid=12175 comm="syz.3.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 225.199551][ T29] audit: type=1400 audit(19231660.489:43124): avc: denied { mac_admin } for pid=12174 comm="syz.5.2846" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 225.220783][ T29] audit: type=1400 audit(19231660.489:43125): avc: denied { relabelto } for pid=12174 comm="syz.5.2846" name="cgroup.procs" dev="cgroup" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 225.223580][T12179] lo: entered promiscuous mode [ 225.248054][ T29] audit: type=1400 audit(19231660.489:43126): avc: denied { associate } for pid=12174 comm="syz.5.2846" name="cgroup.procs" dev="cgroup" ino=494 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:net_conf_t:s0" [ 225.252753][T12179] lo: entered allmulticast mode [ 225.285991][ T29] audit: type=1326 audit(19231660.489:43127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12174 comm="syz.5.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b32bd169 code=0x7ffc0000 [ 225.311773][T12179] tunl0: entered promiscuous mode [ 225.317143][T12179] tunl0: entered allmulticast mode [ 225.333598][T12155] syz.2.2841: attempt to access beyond end of device [ 225.333598][T12155] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 225.351789][T12179] gre0: entered promiscuous mode [ 225.356924][T12179] gre0: entered allmulticast mode [ 225.363473][T12179] gretap0: entered promiscuous mode [ 225.368839][T12179] gretap0: entered allmulticast mode [ 225.374185][T12184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.379205][T12179] erspan0: entered promiscuous mode [ 225.387750][T12179] erspan0: entered allmulticast mode [ 225.395786][T12179] ip_vti0: entered promiscuous mode [ 225.401041][T12179] ip_vti0: entered allmulticast mode [ 225.407148][T12179] ip6_vti0: entered promiscuous mode [ 225.412536][T12179] ip6_vti0: entered allmulticast mode [ 225.412856][T12179] sit0: entered promiscuous mode [ 225.422965][T12179] sit0: entered allmulticast mode [ 225.428481][T12179] ip6tnl0: entered promiscuous mode [ 225.433742][T12179] ip6tnl0: entered allmulticast mode [ 225.439802][T12179] ip6gre0: entered promiscuous mode [ 225.445063][T12179] ip6gre0: entered allmulticast mode [ 225.450617][T12179] ip6gretap0: entered promiscuous mode [ 225.456141][T12179] ip6gretap0: entered allmulticast mode [ 225.465174][T12179] vcan0: entered promiscuous mode [ 225.470255][T12179] vcan0: entered allmulticast mode [ 225.485559][T12179] : entered promiscuous mode [ 225.490363][T12179] : entered allmulticast mode [ 225.498223][T12179] team0: entered promiscuous mode [ 225.503332][T12179] geneve1: entered promiscuous mode [ 225.508813][T12179] team0: entered allmulticast mode [ 225.513948][T12179] geneve1: entered allmulticast mode [ 225.519961][T12179] dummy0: entered promiscuous mode [ 225.525183][T12179] dummy0: entered allmulticast mode [ 225.530723][T12179] nlmon0: entered promiscuous mode [ 225.536035][T12179] nlmon0: entered allmulticast mode [ 225.541936][T12179] 0ªX¹¦À: entered promiscuous mode [ 225.547534][T12179] batadv0: entered promiscuous mode [ 225.552764][T12179] batadv0: entered allmulticast mode [ 225.558736][T12179] vxcan0: entered promiscuous mode [ 225.563901][T12179] vxcan0: entered allmulticast mode [ 225.569677][T12179] vxcan1: entered promiscuous mode [ 225.574828][T12179] vxcan1: entered allmulticast mode [ 225.582689][T12179] veth0: entered promiscuous mode [ 225.587792][T12179] veth0: entered allmulticast mode [ 225.593194][T12179] veth1: entered promiscuous mode [ 225.598256][T12179] veth1: entered allmulticast mode [ 225.605650][T12179] wg0: entered promiscuous mode [ 225.610539][T12179] wg0: entered allmulticast mode [ 225.617183][T12179] wg1: entered promiscuous mode [ 225.622100][T12179] wg1: entered allmulticast mode [ 225.627600][T12179] wg2: entered promiscuous mode [ 225.632498][T12179] wg2: entered allmulticast mode [ 225.637986][T12179] veth0_to_bridge: entered promiscuous mode [ 225.644000][T12179] veth0_to_bridge: entered allmulticast mode [ 225.650540][T12179] bridge_slave_0: entered promiscuous mode [ 225.656609][T12179] bridge_slave_0: entered allmulticast mode [ 225.663005][T12179] veth0_to_bond: entered promiscuous mode [ 225.668794][T12179] veth0_to_bond: entered allmulticast mode [ 225.675177][T12179] @ÿ: entered promiscuous mode [ 225.680134][T12179] @ÿ: entered allmulticast mode [ 225.685510][T12179] veth1_to_bond: entered promiscuous mode [ 225.691261][T12179] veth1_to_bond: entered allmulticast mode [ 225.697521][T12179] bond_slave_1: entered promiscuous mode [ 225.703272][T12179] bond_slave_1: entered allmulticast mode [ 225.709787][T12179] veth0_to_team: entered promiscuous mode [ 225.715631][T12179] veth0_to_team: entered allmulticast mode [ 225.721761][T12179] team_slave_0: entered promiscuous mode [ 225.727483][T12179] team_slave_0: entered allmulticast mode [ 225.733428][T12179] veth1_to_team: entered promiscuous mode [ 225.739226][T12179] veth1_to_team: entered allmulticast mode [ 225.745518][T12179] team_slave_1: entered promiscuous mode [ 225.751167][T12179] team_slave_1: entered allmulticast mode [ 225.757316][T12179] veth0_to_batadv: entered promiscuous mode [ 225.763332][T12179] veth0_to_batadv: entered allmulticast mode [ 225.769687][T12179] batadv_slave_0: entered promiscuous mode [ 225.775534][T12179] batadv_slave_0: entered allmulticast mode [ 225.781654][T12179] veth1_to_batadv: entered promiscuous mode [ 225.787658][T12179] veth1_to_batadv: entered allmulticast mode [ 225.793862][T12179] batadv_slave_1: entered allmulticast mode [ 225.800150][T12179] xfrm0: entered promiscuous mode [ 225.805229][T12179] xfrm0: entered allmulticast mode [ 225.810628][T12179] veth0_to_hsr: entered promiscuous mode [ 225.816436][T12179] veth0_to_hsr: entered allmulticast mode [ 225.822427][T12179] hsr_slave_0: entered promiscuous mode [ 225.828067][T12179] hsr_slave_0: entered allmulticast mode [ 225.833931][T12179] veth1_to_hsr: entered promiscuous mode [ 225.839667][T12179] veth1_to_hsr: entered allmulticast mode [ 225.845693][T12179] hsr_slave_1: entered promiscuous mode [ 225.851302][T12179] hsr_slave_1: entered allmulticast mode [ 225.857335][T12179] veth1_virt_wifi: entered promiscuous mode [ 225.863245][T12179] veth1_virt_wifi: entered allmulticast mode [ 225.869482][T12179] veth0_virt_wifi: entered promiscuous mode [ 225.875435][T12179] veth0_virt_wifi: entered allmulticast mode [ 225.881719][T12179] geneve0: entered promiscuous mode [ 225.887536][T12179] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.895959][T12179] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.904327][T12179] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.912852][T12179] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.922936][T12179] syztnl0: entered promiscuous mode [ 225.928592][T12179] syztnl0: entered allmulticast mode [ 225.934387][T12179] hsr1: entered promiscuous mode [ 225.939402][T12179] hsr1: entered allmulticast mode [ 225.944655][T12179] veth2: entered promiscuous mode [ 225.949971][T12179] veth2: entered allmulticast mode [ 225.955414][T12179] veth3: entered promiscuous mode [ 225.960501][T12179] veth3: entered allmulticast mode [ 225.965923][T12179] erspan1: entered promiscuous mode [ 225.971159][T12179] erspan1: entered allmulticast mode [ 225.976926][T12179] bond0: entered promiscuous mode [ 225.982144][T12179] bond0: entered allmulticast mode [ 225.987771][T12179] veth4: entered promiscuous mode [ 225.992810][T12179] veth4: entered allmulticast mode [ 225.998361][T12179] veth5: entered promiscuous mode [ 226.003496][T12179] veth5: entered allmulticast mode [ 226.008876][T12179] veth6: entered promiscuous mode [ 226.013923][T12179] veth6: entered allmulticast mode [ 226.019407][T12179] veth7: entered promiscuous mode [ 226.024441][T12179] veth7: entered allmulticast mode [ 226.029942][T12179] pimreg12: entered promiscuous mode [ 226.035940][T12179] bond1: entered promiscuous mode [ 226.040978][T12179] gretap1: entered promiscuous mode [ 226.046387][T12179] bond1: entered allmulticast mode [ 226.051549][T12179] gretap1: entered allmulticast mode [ 226.060665][T12179] netdevsim netdevsim3 eth0: entered promiscuous mode [ 226.067553][T12179] netdevsim netdevsim3 eth0: entered allmulticast mode [ 226.074778][T12179] netdevsim netdevsim3 eth1: entered promiscuous mode [ 226.081587][T12179] netdevsim netdevsim3 eth1: entered allmulticast mode [ 226.088717][T12179] netdevsim netdevsim3 eth2: entered promiscuous mode [ 226.095576][T12179] netdevsim netdevsim3 eth2: entered allmulticast mode [ 226.102709][T12179] netdevsim netdevsim3 eth3: entered promiscuous mode [ 226.109639][T12179] netdevsim netdevsim3 eth3: entered allmulticast mode [ 226.157121][T12182] ip6gretap0 speed is unknown, defaulting to 1000 [ 226.216499][T12182] lo speed is unknown, defaulting to 1000 [ 226.390029][T12196] loop2: detected capacity change from 0 to 164 [ 226.424759][T12196] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 226.463333][T12196] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 226.484364][T12196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2860'. [ 226.493479][T12196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2860'. [ 226.511811][T12196] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2860'. [ 226.526475][T12211] loop5: detected capacity change from 0 to 256 [ 226.609346][T12208] ip6gretap0 speed is unknown, defaulting to 1000 [ 226.675421][T12208] lo speed is unknown, defaulting to 1000 [ 226.874481][T12222] block device autoloading is deprecated and will be removed. [ 226.894619][T12218] bond2: entered promiscuous mode [ 226.899815][T12218] bond2: entered allmulticast mode [ 226.911739][T12218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.940451][T12218] bond2 (unregistering): Released all slaves [ 226.988244][T12202] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2858'. [ 227.455820][T12231] SELinux: failed to load policy [ 227.595245][T12235] netlink: 'syz.4.2869': attribute type 2 has an invalid length. [ 227.603044][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2869'. [ 227.620395][T12240] netlink: 'syz.3.2871': attribute type 13 has an invalid length. [ 228.058674][T12254] loop5: detected capacity change from 0 to 128 [ 228.174499][T12263] bridge0: left promiscuous mode [ 228.252251][T12268] loop4: detected capacity change from 0 to 4096 [ 228.273959][T12268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.290684][T12268] EXT4-fs error (device loop4): ext4_do_update_inode:5194: inode #15: comm +!: corrupted inode contents [ 228.302910][T12268] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #15: comm +!: mark_inode_dirty error [ 228.323099][T12268] EXT4-fs error (device loop4): ext4_do_update_inode:5194: inode #15: comm +!: corrupted inode contents [ 228.366553][T12268] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm +!: mark_inode_dirty error [ 228.415045][T12268] EXT4-fs error (device loop4): ext4_do_update_inode:5194: inode #15: comm +!: corrupted inode contents [ 228.436180][T12268] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm +!: mark_inode_dirty error [ 228.454454][T12268] EXT4-fs error (device loop4): ext4_do_update_inode:5194: inode #15: comm +!: corrupted inode contents [ 228.487506][T12268] EXT4-fs error (device loop4): ext4_truncate:4266: inode #15: comm +!: mark_inode_dirty error [ 228.500202][T12268] EXT4-fs error (device loop4) in ext4_setattr:5611: Corrupt filesystem [ 228.606367][T12281] bond1: entered promiscuous mode [ 228.611459][T12281] bond1: entered allmulticast mode [ 228.626911][T12281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.639194][T12281] bond1 (unregistering): Released all slaves [ 228.874461][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.008436][T12338] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2887'. [ 229.032383][T12338] loop4: detected capacity change from 0 to 128 [ 229.058019][T12338] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.141511][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.163120][T12353] netlink: 'syz.4.2888': attribute type 13 has an invalid length. [ 229.173746][T12353] pimreg12: entered promiscuous mode [ 230.409090][ T29] kauditd_printk_skb: 643 callbacks suppressed [ 230.409108][ T29] audit: type=1400 audit(19231665.739:43771): avc: denied { cpu } for pid=12435 comm="syz.2.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 230.438158][T12434] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12434 comm=syz.4.2900 [ 230.460923][ T29] audit: type=1400 audit(19231665.769:43772): avc: denied { write } for pid=12435 comm="syz.2.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 230.478917][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2900'. [ 230.480648][ T29] audit: type=1400 audit(19231665.779:43773): avc: denied { read } for pid=12432 comm="syz.4.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 230.492468][T12434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12434 comm=syz.4.2900 [ 230.509751][ T29] audit: type=1400 audit(19231665.789:43774): avc: denied { connect } for pid=12435 comm="syz.2.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 230.541820][ T29] audit: type=1400 audit(19231665.789:43775): avc: denied { name_connect } for pid=12435 comm="syz.2.2909" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 230.564750][ T29] audit: type=1400 audit(19231665.819:43776): avc: denied { ioctl } for pid=12432 comm="syz.4.2900" path="socket:[36110]" dev="sockfs" ino=36110 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 230.595221][ T29] audit: type=1400 audit(19231665.899:43777): avc: denied { mounton } for pid=12435 comm="syz.2.2909" path="/636/file0" dev="tmpfs" ino=3447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 230.618471][ T29] audit: type=1400 audit(19231665.899:43778): avc: denied { mount } for pid=12435 comm="syz.2.2909" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 230.698712][T12449] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2901'. [ 230.762302][T12446] netlink: 'syz.4.2902': attribute type 13 has an invalid length. [ 230.851495][ T29] audit: type=1400 audit(19231666.179:43779): avc: denied { write } for pid=12464 comm="syz.0.2910" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 230.875249][ T29] audit: type=1400 audit(19231666.179:43780): avc: denied { open } for pid=12464 comm="syz.0.2910" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 230.889371][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2910'. [ 230.958386][T12474] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2912'. [ 230.969338][T12474] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 231.019605][T12474] loop5: detected capacity change from 0 to 1024 [ 231.061153][T12474] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 231.072103][T12474] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 231.125723][T12474] JBD2: no valid journal superblock found [ 231.131516][T12474] EXT4-fs (loop5): Could not load journal inode [ 231.296785][T12484] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2925'. [ 231.322067][T12484] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 231.424277][T12484] loop5: detected capacity change from 0 to 1024 [ 231.506015][T12484] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 231.516988][T12484] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 231.581884][T12484] JBD2: no valid journal superblock found [ 231.588226][T12484] EXT4-fs (loop5): Could not load journal inode [ 231.814717][T12502] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2928'. [ 231.828993][T12502] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 231.859670][T12502] loop4: detected capacity change from 0 to 1024 [ 231.868289][T12503] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2916'. [ 231.892053][T12502] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 231.903077][T12502] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 231.925055][T12503] loop5: detected capacity change from 0 to 128 [ 231.987977][T12502] JBD2: no valid journal superblock found [ 231.993754][T12502] EXT4-fs (loop4): Could not load journal inode [ 232.003310][T12503] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.033858][T12504] bridge0: entered allmulticast mode [ 232.068751][T12513] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12513 comm=syz.3.2923 [ 232.092817][T10094] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.113352][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2923'. [ 232.134298][T12504] team0: Port device bridge0 removed [ 232.144512][T12515] netlink: 'syz.0.2921': attribute type 13 has an invalid length. [ 232.157492][T12515] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.166046][T12515] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.174432][T12515] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.182968][T12515] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.195947][T12515] netdevsim netdevsim0 eth0: entered promiscuous mode [ 232.202773][T12515] netdevsim netdevsim0 eth0: entered allmulticast mode [ 232.210187][T12515] netdevsim netdevsim0 eth1: entered promiscuous mode [ 232.217030][T12515] netdevsim netdevsim0 eth1: entered allmulticast mode [ 232.224232][T12515] netdevsim netdevsim0 eth2: entered promiscuous mode [ 232.231234][T12515] netdevsim netdevsim0 eth2: entered allmulticast mode [ 232.238821][T12515] netdevsim netdevsim0 eth3: entered promiscuous mode [ 232.245864][T12515] netdevsim netdevsim0 eth3: entered allmulticast mode [ 232.253845][T12513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12513 comm=syz.3.2923 [ 232.361223][T12533] netlink: 'syz.3.2930': attribute type 13 has an invalid length. [ 232.500395][T12540] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12540 comm=syz.3.2934 [ 232.565843][T12538] loop5: detected capacity change from 0 to 512 [ 232.609349][T12538] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 232.619313][T12538] System zones: 0-2, 18-18, 34-34 [ 232.631773][T12538] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2933: bg 0: block 248: padding at end of block bitmap is not set [ 232.641706][T12552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2937'. [ 232.650418][T12538] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2933: Failed to acquire dquot type 1 [ 232.668073][T12552] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 232.668699][T12538] EXT4-fs (loop5): 1 truncate cleaned up [ 232.684241][T12538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.709492][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2933'. [ 232.861959][T10094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.070867][T12569] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12569 comm=syz.5.2941 [ 233.145175][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2941'. [ 233.155400][T12569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12569 comm=syz.5.2941 [ 233.229833][T12574] netlink: 'syz.4.2942': attribute type 2 has an invalid length. [ 233.237807][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2942'. [ 233.402498][T12584] netlink: 'syz.4.2944': attribute type 13 has an invalid length. [ 233.540204][T12591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.572237][T12590] ip6gretap0 speed is unknown, defaulting to 1000 [ 233.587740][T12591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.744115][T12590] lo speed is unknown, defaulting to 1000 [ 233.829450][T12609] 9pnet_fd: Insufficient options for proto=fd [ 233.879476][T12612] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12612 comm=syz.3.2954 [ 233.984173][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2954'. [ 233.984480][T12614] netlink: 'syz.2.2955': attribute type 2 has an invalid length. [ 233.996663][T12612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12612 comm=syz.3.2954 [ 234.001055][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2955'. [ 234.281338][T12650] loop5: detected capacity change from 0 to 2048 [ 234.317282][T12650] loop5: p1 < > p4 [ 234.322441][T12650] loop5: p4 size 8388608 extends beyond EOD, truncated [ 234.504180][T12684] netlink: 'syz.4.2962': attribute type 10 has an invalid length. [ 234.512177][T12684] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2962'. [ 234.524042][T12684] geneve1: left promiscuous mode [ 234.529234][T12684] geneve1: left allmulticast mode [ 234.563213][T12684] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.571631][T12684] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.584540][T12684] geneve1: entered promiscuous mode [ 234.589950][T12684] geneve1: entered allmulticast mode [ 234.597670][T12684] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 234.606954][T12684] team0: Failed to send options change via netlink (err -105) [ 234.614482][T12684] team0: Port device geneve1 added [ 234.624963][T12692] pim6reg: entered allmulticast mode [ 234.631957][T12675] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.643575][T12698] pim6reg: left allmulticast mode [ 234.682349][T12675] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.734485][T12675] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.750664][T12675] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.763995][T12675] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.778542][T12675] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.910462][T12731] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2974'. [ 234.919648][T12731] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2974'. [ 235.083023][ T3004] loop5: p1 < > p4 [ 235.090393][ T3004] loop5: p4 size 8388608 extends beyond EOD, truncated [ 235.388180][T12770] netlink: 'syz.3.2967': attribute type 1 has an invalid length. [ 235.457654][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 235.457670][ T29] audit: type=1400 audit(19231670.789:44251): avc: denied { mount } for pid=12774 comm="syz.3.2968" name="/" dev="ramfs" ino=36457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 235.637793][ T29] audit: type=1400 audit(19231670.969:44252): avc: denied { watch watch_reads } for pid=12774 comm="syz.3.2968" path="/" dev="ramfs" ino=36457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 235.793700][T12784] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12784 comm=syz.5.2970 [ 235.829294][ T29] audit: type=1400 audit(19231671.039:44253): avc: denied { mount } for pid=12773 comm="syz.0.2979" name="/" dev="rpc_pipefs" ino=36469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 235.883158][T12787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12787 comm=syz.5.2970 [ 236.097073][ T29] audit: type=1326 audit(19231671.429:44254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12792 comm="syz.4.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25819fd169 code=0x7ffc0000 [ 236.120663][ T29] audit: type=1326 audit(19231671.429:44255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12792 comm="syz.4.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25819fd169 code=0x7ffc0000 [ 236.174290][ T29] audit: type=1326 audit(19231671.469:44256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12792 comm="syz.4.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f25819fd169 code=0x7ffc0000 [ 236.197797][ T29] audit: type=1326 audit(19231671.469:44257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12792 comm="syz.4.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25819fd169 code=0x7ffc0000 [ 236.221613][ T29] audit: type=1326 audit(19231671.469:44258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12792 comm="syz.4.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25819fd169 code=0x7ffc0000 [ 236.245320][ T29] audit: type=1326 audit(19231671.479:44259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12792 comm="syz.4.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f25819fd169 code=0x7ffc0000 [ 236.268833][ T29] audit: type=1326 audit(19231671.479:44260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12792 comm="syz.4.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25819fd169 code=0x7ffc0000 [ 236.399955][T12807] netlink: 'syz.0.2975': attribute type 2 has an invalid length. [ 237.379641][T12840] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12840 comm=syz.3.2987 [ 237.431449][T12836] ip6gretap0 speed is unknown, defaulting to 1000 [ 237.438187][T12840] __nla_validate_parse: 7 callbacks suppressed [ 237.438205][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2987'. [ 237.459492][T12840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12840 comm=syz.3.2987 [ 237.502842][T12836] lo speed is unknown, defaulting to 1000 [ 237.527831][T12846] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12846 comm=syz.0.2999 [ 237.580994][T12849] netlink: 'syz.2.2990': attribute type 2 has an invalid length. [ 237.588815][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2990'. [ 237.588904][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2999'. [ 237.621018][T12846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12846 comm=syz.0.2999 [ 237.920583][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2994'. [ 238.584581][T12879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3007'. [ 238.607228][T12873] loop4: detected capacity change from 0 to 512 [ 238.613834][T12873] ext4: Unknown parameter 'uid<00000000000000000000' [ 238.745976][T12885] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12885 comm=syz.0.3000 [ 238.766280][T12876] netlink: 'syz.2.2997': attribute type 13 has an invalid length. [ 238.779749][T12876] lo: entered promiscuous mode [ 238.784660][T12876] lo: entered allmulticast mode [ 238.793113][T12876] tunl0: entered promiscuous mode [ 238.798263][T12876] tunl0: entered allmulticast mode [ 238.805808][T12876] gre0: entered promiscuous mode [ 238.810795][T12876] gre0: entered allmulticast mode [ 238.842269][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3000'. [ 238.858226][T12876] gretap0: entered promiscuous mode [ 238.863498][T12876] gretap0: entered allmulticast mode [ 238.892343][T12876] erspan0: entered promiscuous mode [ 238.897781][T12876] erspan0: entered allmulticast mode [ 238.908755][T12892] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3002'. [ 238.917856][T12892] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3002'. [ 238.922284][T12876] ip_vti0: entered promiscuous mode [ 238.926909][T12892] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3002'. [ 238.932059][T12876] ip_vti0: entered allmulticast mode [ 238.981033][T12876] ip6_vti0: entered promiscuous mode [ 238.986425][T12876] ip6_vti0: entered allmulticast mode [ 239.003543][T12876] sit0: entered promiscuous mode [ 239.008771][T12876] sit0: entered allmulticast mode [ 239.033640][T12885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12885 comm=syz.0.3000 [ 239.053553][T12892] loop4: detected capacity change from 0 to 512 [ 239.053941][T12876] ip6tnl0: entered promiscuous mode [ 239.065394][T12876] ip6tnl0: entered allmulticast mode [ 239.076321][T12876] tipc: Resetting bearer [ 239.081969][T12876] ip6gre0: entered promiscuous mode [ 239.087498][T12876] ip6gre0: entered allmulticast mode [ 239.100883][T12876] ip6gretap0: entered promiscuous mode [ 239.102323][T12892] EXT4-fs (loop4): 1 orphan inode deleted [ 239.106525][T12876] ip6gretap0: entered allmulticast mode [ 239.114154][T12892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.144569][ T8177] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:30: Failed to release dquot type 1 [ 239.189421][T12876] vcan0: entered promiscuous mode [ 239.194515][T12876] vcan0: entered allmulticast mode [ 239.212955][T12876] : entered promiscuous mode [ 239.217788][T12876] batadv0: entered promiscuous mode [ 239.220705][T12904] loop5: detected capacity change from 0 to 2048 [ 239.223100][T12876] : entered allmulticast mode [ 239.234219][T12876] batadv0: entered allmulticast mode [ 239.236763][T12904] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.248322][T12876] team0: entered promiscuous mode [ 239.253441][T12876] geneve1: entered promiscuous mode [ 239.258875][T12876] team0: entered allmulticast mode [ 239.264029][T12876] geneve1: entered allmulticast mode [ 239.271542][T12876] dummy0: entered promiscuous mode [ 239.276959][T12876] dummy0: entered allmulticast mode [ 239.291381][T12876] nlmon0: entered promiscuous mode [ 239.296695][T12876] nlmon0: entered allmulticast mode [ 239.304493][T12876] caif0: entered promiscuous mode [ 239.309621][T12876] caif0: entered allmulticast mode [ 239.317715][T12904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 239.337086][T12904] EXT4-fs error (device loop5): ext4_read_inline_dir:1501: inode #12: block 5: comm syz.5.3005: path /126/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0 [ 239.362214][T12904] EXT4-fs (loop5): Remounting filesystem read-only [ 239.386666][T12876] vxcan0: entered promiscuous mode [ 239.391852][T12876] vxcan0: entered allmulticast mode [ 239.399682][T12876] vxcan1: entered promiscuous mode [ 239.404934][T12876] vxcan1: entered allmulticast mode [ 239.411739][T12876] veth0: entered promiscuous mode [ 239.416923][T12876] veth0: entered allmulticast mode [ 239.436769][T12876] veth1: entered promiscuous mode [ 239.441874][T12876] veth1: entered allmulticast mode [ 239.449186][T12876] wg0: entered promiscuous mode [ 239.454093][T12876] wg0: entered allmulticast mode [ 239.466234][T12876] wg1: entered promiscuous mode [ 239.471206][T12876] wg1: entered allmulticast mode [ 239.487874][T12876] veth0_to_bridge: entered promiscuous mode [ 239.493856][T12876] veth0_to_bridge: entered allmulticast mode [ 239.502523][T12876] bridge_slave_0: entered promiscuous mode [ 239.508616][T12876] bridge_slave_0: entered allmulticast mode [ 239.515186][T12876] veth1_to_bridge: entered promiscuous mode [ 239.521111][T12876] veth1_to_bridge: entered allmulticast mode [ 239.529044][T12876] bridge_slave_1: entered promiscuous mode [ 239.534889][T12876] bridge_slave_1: entered allmulticast mode [ 239.546992][T12876] veth0_to_bond: entered promiscuous mode [ 239.552869][T12876] veth0_to_bond: entered allmulticast mode [ 239.561215][T12876] bond_slave_0: entered promiscuous mode [ 239.567083][T12876] bond_slave_0: entered allmulticast mode [ 239.585775][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.595261][T12876] veth1_to_bond: entered promiscuous mode [ 239.601018][T12876] veth1_to_bond: entered allmulticast mode [ 239.619373][T12876] bond_slave_1: entered promiscuous mode [ 239.625112][T12876] bond_slave_1: entered allmulticast mode [ 239.638699][T12876] veth0_to_team: entered promiscuous mode [ 239.644475][T12876] veth0_to_team: entered allmulticast mode [ 239.653332][T12876] team_slave_0: entered promiscuous mode [ 239.659400][T12876] team_slave_0: entered allmulticast mode [ 239.673104][T12876] veth1_to_team: entered promiscuous mode [ 239.679439][T12876] veth1_to_team: entered allmulticast mode [ 239.688553][T12876] team_slave_1: entered promiscuous mode [ 239.694221][T12876] team_slave_1: entered allmulticast mode [ 239.700538][T12876] veth0_to_batadv: entered promiscuous mode [ 239.706840][T12876] veth0_to_batadv: entered allmulticast mode [ 239.714148][T12876] batadv_slave_0: entered promiscuous mode [ 239.720135][T12876] batadv_slave_0: entered allmulticast mode [ 239.727588][T12876] veth1_to_batadv: entered promiscuous mode [ 239.733530][T12876] veth1_to_batadv: entered allmulticast mode [ 239.741269][T12876] batadv_slave_1: entered promiscuous mode [ 239.747257][T12876] batadv_slave_1: entered allmulticast mode [ 239.754222][T12876] xfrm0: entered promiscuous mode [ 239.759323][T12876] xfrm0: entered allmulticast mode [ 239.765868][T12876] veth0_to_hsr: entered promiscuous mode [ 239.771568][T12876] veth0_to_hsr: entered allmulticast mode [ 239.780034][T12876] hsr_slave_0: entered allmulticast mode [ 239.786822][T12876] veth1_to_hsr: entered promiscuous mode [ 239.792491][T12876] veth1_to_hsr: entered allmulticast mode [ 239.801109][T12876] hsr_slave_1: entered allmulticast mode [ 239.808159][T12876] hsr0: entered promiscuous mode [ 239.813238][T12876] hsr0: entered allmulticast mode [ 239.820910][T12876] veth1_virt_wifi: entered promiscuous mode [ 239.826874][T12876] veth1_virt_wifi: entered allmulticast mode [ 239.834257][T12876] veth0_virt_wifi: entered promiscuous mode [ 239.840311][T12876] veth0_virt_wifi: entered allmulticast mode [ 239.849004][T12876] veth1_macvtap: entered allmulticast mode [ 239.856090][T12876] veth0_macvtap: entered allmulticast mode [ 239.863194][T12876] macvtap0: entered promiscuous mode [ 239.868648][T12876] macvtap0: entered allmulticast mode [ 239.877847][T12876] @: entered promiscuous mode [ 239.882686][T12876] @: entered allmulticast mode [ 239.888825][T12876] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.897328][T12876] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.905769][T12876] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.914242][T12876] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.922735][T12876] geneve0: entered promiscuous mode [ 239.927989][T12876] geneve0: entered allmulticast mode [ 239.934392][T12876] ip6erspan0: entered promiscuous mode [ 239.940007][T12876] ip6erspan0: entered allmulticast mode [ 239.946155][T12876] syztnl0: entered promiscuous mode [ 239.951372][T12876] syztnl0: entered allmulticast mode [ 239.957036][T12876] veth2: entered promiscuous mode [ 239.962141][T12876] veth2: entered allmulticast mode [ 239.967598][T12876] veth3: entered promiscuous mode [ 239.972642][T12876] veth3: entered allmulticast mode [ 239.979713][T12876] batadv0.11: entered promiscuous mode [ 239.985562][T12876] batadv0.11: entered allmulticast mode [ 239.991372][T12876] veth4: entered promiscuous mode [ 239.996540][T12876] veth4: entered allmulticast mode [ 240.001855][T12876] veth5: entered promiscuous mode [ 240.007011][T12876] veth5: entered allmulticast mode [ 240.012467][T12876] xfrm1: entered promiscuous mode [ 240.017554][T12876] xfrm1: entered allmulticast mode [ 240.022904][T12876] veth6: entered promiscuous mode [ 240.028001][T12876] veth6: entered allmulticast mode [ 240.033471][T12876] veth7: entered promiscuous mode [ 240.038623][T12876] veth7: entered allmulticast mode [ 240.043998][T12876] erspan1: entered promiscuous mode [ 240.049343][T12876] erspan1: entered allmulticast mode [ 240.054943][T12876] veth8: entered promiscuous mode [ 240.060046][T12876] veth8: entered allmulticast mode [ 240.065498][T12876] veth9: entered promiscuous mode [ 240.070541][T12876] veth9: entered allmulticast mode [ 240.075960][T12876] netdevsim netdevsim2 eth0: entered promiscuous mode [ 240.082776][T12876] netdevsim netdevsim2 eth0: entered allmulticast mode [ 240.090147][T12876] netdevsim netdevsim2 eth1: entered promiscuous mode [ 240.096994][T12876] netdevsim netdevsim2 eth1: entered allmulticast mode [ 240.104001][T12876] netdevsim netdevsim2 eth2: entered promiscuous mode [ 240.110886][T12876] netdevsim netdevsim2 eth2: entered allmulticast mode [ 240.118100][T12876] netdevsim netdevsim2 eth3: entered promiscuous mode [ 240.124949][T12876] netdevsim netdevsim2 eth3: entered allmulticast mode [ 240.132112][T12876] pimreg12: entered promiscuous mode [ 240.142123][ T9] ip6gretap0 speed is unknown, defaulting to 1000 [ 240.148656][ T9] syz0: Port: 1 Link DOWN [ 240.153075][ T3458] ip6gretap0 speed is unknown, defaulting to 1000 [ 240.174116][T10094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.212219][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3011'. [ 240.252186][T12912] ip6gretap0 speed is unknown, defaulting to 1000 [ 240.316148][T12912] lo speed is unknown, defaulting to 1000 [ 240.560046][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 240.560064][ T29] audit: type=1400 audit(19231675.889:44581): avc: denied { read } for pid=12923 comm="syz.2.3023" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 240.623045][ T29] audit: type=1400 audit(19231675.929:44582): avc: denied { open } for pid=12923 comm="syz.2.3023" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 240.630866][T12928] loop4: detected capacity change from 0 to 128 [ 240.651485][ T29] audit: type=1404 audit(19231675.929:44583): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 240.672635][ T29] audit: type=1404 audit(19231675.929:44584): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 240.687579][ T29] audit: type=1400 audit(19231675.939:44585): avc: denied { prog_load } for pid=12924 comm="syz.0.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 240.698626][T12928] msdos: Unknown parameter 'sys_enter' [ 240.706696][ T29] audit: type=1400 audit(19231675.939:44586): avc: denied { bpf } for pid=12924 comm="syz.0.3022" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 240.732828][ T29] audit: type=1400 audit(19231675.939:44587): avc: denied { perfmon } for pid=12924 comm="syz.0.3022" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 240.732898][ T29] audit: type=1400 audit(19231675.939:44588): avc: denied { map_create } for pid=12923 comm="syz.2.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 240.732934][ T29] audit: type=1400 audit(19231675.939:44589): avc: denied { create } for pid=12924 comm="syz.0.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 240.732967][ T29] audit: type=1400 audit(19231675.949:44590): avc: denied { name_bind } for pid=12924 comm="syz.0.3022" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 240.853552][T12935] netlink: 'syz.5.3012': attribute type 10 has an invalid length. [ 240.899136][T12935] geneve1: left promiscuous mode [ 240.904143][T12935] geneve1: left allmulticast mode [ 240.910019][T12935] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.918272][T12935] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.926514][T12935] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.938975][T12935] geneve1: entered promiscuous mode [ 240.944335][T12935] geneve1: entered allmulticast mode [ 240.952717][T12935] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 240.970071][T12935] team0: Failed to send options change via netlink (err -105) [ 240.977594][T12935] team0: Port device geneve1 added [ 241.203249][T12930] pim6reg: entered allmulticast mode [ 241.260065][T12939] pim6reg: left allmulticast mode [ 241.328244][T12941] pim6reg: entered allmulticast mode [ 241.367918][T12934] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.409652][T12945] pim6reg: left allmulticast mode [ 241.456295][T12934] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.524896][T12934] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.621398][T12934] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.636940][T12934] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.649627][T12934] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.661885][T12934] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.889966][T12981] loop4: detected capacity change from 0 to 2048 [ 241.905363][T12981] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.918788][T12981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.054034][T12981] EXT4-fs error (device loop4): ext4_read_inline_dir:1501: inode #12: block 5: comm syz.4.3021: path /550/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0 [ 242.281873][T12981] EXT4-fs (loop4): Remounting filesystem read-only [ 242.425897][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.619194][T13011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.650645][T13011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.694972][T13005] ip6gretap0 speed is unknown, defaulting to 1000 [ 242.752134][T13016] netlink: 'syz.2.3028': attribute type 2 has an invalid length. [ 242.752740][T13024] __nla_validate_parse: 3 callbacks suppressed [ 242.752756][T13024] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3029'. [ 242.760090][T13016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3028'. [ 242.796301][T13024] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 242.837809][T13024] loop5: detected capacity change from 0 to 1024 [ 242.858639][T13024] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 242.869606][T13024] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 242.885103][T13024] JBD2: no valid journal superblock found [ 242.890892][T13024] EXT4-fs (loop5): Could not load journal inode [ 242.928266][T13036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.938188][T13005] lo speed is unknown, defaulting to 1000 [ 242.959732][T13036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.027763][T13045] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3033'. [ 243.053098][T13032] ip6gretap0 speed is unknown, defaulting to 1000 [ 243.097169][T13045] loop5: detected capacity change from 0 to 512 [ 243.106765][T13045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.114892][T13045] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 243.248813][T13032] lo speed is unknown, defaulting to 1000 [ 243.359633][T13071] loop5: detected capacity change from 0 to 128 [ 243.377171][T13071] msdos: Unknown parameter 'sys_enter' [ 243.798134][T13119] loop4: detected capacity change from 0 to 1024 [ 243.857463][T13119] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 243.868453][T13119] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 243.890821][T13119] JBD2: no valid journal superblock found [ 243.896647][T13119] EXT4-fs (loop4): Could not load journal inode [ 243.970001][T13114] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 243.981416][T13114] loop4: detected capacity change from 0 to 164 [ 243.989312][T13114] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 244.151563][T13135] : renamed from bond0 [ 244.162241][T13138] loop5: detected capacity change from 0 to 2048 [ 244.198322][T13138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.867030][T13138] ================================================================== [ 244.875333][T13138] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 244.883600][T13138] [ 244.885923][T13138] write to 0xffff8881437758d4 of 4 bytes by task 13149 on cpu 1: [ 244.893660][T13138] xas_set_mark+0x13d/0x150 [ 244.898198][T13138] __folio_start_writeback+0x1ea/0x440 [ 244.903660][T13138] ext4_bio_write_folio+0x591/0x9d0 [ 244.908862][T13138] mpage_process_page_bufs+0x488/0x5d0 [ 244.914343][T13138] mpage_prepare_extent_to_map+0x791/0xb80 [ 244.920184][T13138] ext4_do_writepages+0xa3b/0x21d0 [ 244.925314][T13138] ext4_writepages+0x183/0x320 [ 244.930094][T13138] do_writepages+0x1d8/0x480 [ 244.934693][T13138] file_write_and_wait_range+0x16e/0x2f0 [ 244.940329][T13138] generic_buffers_fsync_noflush+0x46/0x120 [ 244.946223][T13138] ext4_sync_file+0x1c3/0x6c0 [ 244.950905][T13138] vfs_fsync_range+0x116/0x130 [ 244.955668][T13138] ext4_buffered_write_iter+0x358/0x3c0 [ 244.961219][T13138] ext4_file_write_iter+0xe49/0xf80 [ 244.966431][T13138] iter_file_splice_write+0x5f2/0x980 [ 244.971829][T13138] direct_splice_actor+0x160/0x2c0 [ 244.976955][T13138] splice_direct_to_actor+0x305/0x680 [ 244.982343][T13138] do_splice_direct+0xd9/0x150 [ 244.987106][T13138] do_sendfile+0x40a/0x690 [ 244.991531][T13138] __x64_sys_sendfile64+0x113/0x160 [ 244.996750][T13138] x64_sys_call+0xfc3/0x2e10 [ 245.001340][T13138] do_syscall_64+0xc9/0x1c0 [ 245.005867][T13138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.011780][T13138] [ 245.014106][T13138] read to 0xffff8881437758d4 of 4 bytes by task 13138 on cpu 0: [ 245.021741][T13138] filemap_write_and_wait_range+0x105/0x370 [ 245.027639][T13138] filemap_invalidate_pages+0xa8/0x1a0 [ 245.033099][T13138] kiocb_invalidate_pages+0x6c/0x80 [ 245.038306][T13138] __iomap_dio_rw+0x5d4/0x12a0 [ 245.043069][T13138] iomap_dio_rw+0x40/0x90 [ 245.047413][T13138] ext4_file_write_iter+0xba9/0xf80 [ 245.052630][T13138] iter_file_splice_write+0x5f2/0x980 [ 245.058012][T13138] direct_splice_actor+0x160/0x2c0 [ 245.063124][T13138] splice_direct_to_actor+0x305/0x680 [ 245.068500][T13138] do_splice_direct+0xd9/0x150 [ 245.073276][T13138] do_sendfile+0x40a/0x690 [ 245.077694][T13138] __x64_sys_sendfile64+0x113/0x160 [ 245.082909][T13138] x64_sys_call+0xfc3/0x2e10 [ 245.087508][T13138] do_syscall_64+0xc9/0x1c0 [ 245.092017][T13138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.097907][T13138] [ 245.100229][T13138] value changed: 0x0a000021 -> 0x04000021 [ 245.105950][T13138] [ 245.108268][T13138] Reported by Kernel Concurrency Sanitizer on: [ 245.114411][T13138] CPU: 0 UID: 0 PID: 13138 Comm: syz.5.3036 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(voluntary) [ 245.126598][T13138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.136670][T13138] ================================================================== [ 245.258358][T10094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.