last executing test programs: 2m3.537990477s ago: executing program 4 (id=883): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x18) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001300000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x3000040, 0x8, 0x1b, 0xfe, &(0x7f00000000c0)="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"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0xffffffff, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x1, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r5 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7abff, 0x0, 0x3) 2m2.753019083s ago: executing program 4 (id=890): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000002900000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000940)='sys_enter\x00', r3}, 0x18) setreuid(0xee01, 0xee01) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400"], 0x10c}}, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="dfbf000000000000000067"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) r7 = socket$inet6(0x10, 0x2, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=0x0, @ANYBLOB="0800c300741300000800c4"], 0x2c}, 0x1, 0x0, 0x0, 0x24000891}, 0x40000c0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r12 = getpgrp(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000001380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001240)={0x48, r9, 0xa00, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7a}, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_PID={0x8, 0x52, r12}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x3c}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014}, 0x40041) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "35575b63c1154a950bf47c0a992b914c"}]}, 0x30}, 0x1, 0x0, 0x0, 0x401}, 0x8000) 2m1.676460202s ago: executing program 4 (id=899): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002ec4f7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x54) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x1c, 0x38, 0x601, 0x0, 0x0, "", [@nested={0xc, 0x73, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @uid=r4}]}]}, 0x1c}], 0x1}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x710, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @private}}}}) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x60800, 0x0) r9 = socket(0x1e, 0x805, 0x0) connect$tipc(r9, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000280)=0x13, 0x4) connect$tipc(r9, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r6, r8, 0x0, 0x1000008) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r10, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 2m1.417718384s ago: executing program 4 (id=901): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) sendmsg$NFT_BATCH(r0, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x2c0}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket(0x11, 0x800000003, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = memfd_create(0x0, 0x5) fsetxattr$security_selinux(r4, &(0x7f0000000480), 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x800004, &(0x7f0000001b40)={[{@dioread_lock}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@data_err_ignore}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x41}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") setgroups(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x3}}, './file1\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r6}, 0x10) getrlimit(0x1, &(0x7f0000000000)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xf}, {0x10, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7f}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r8, 0x0, 0x8000000000}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x8, 0x3a, 0xff, @empty, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x7ff, 0x7}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/192]) 2m1.120266046s ago: executing program 4 (id=905): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000066000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x45) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@md0, 0x0, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8, 0x12, r6, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000340)='\x00') 2m0.755820309s ago: executing program 4 (id=910): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="310000004820b44393293cf6", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000200000e2ff0000000000007e000000000000009cd99b0c4953e4d7a2ac40ff90262ed187c23f278773ffd6ecf2bc7f8bbb6360571d4c1f1a15f4a0258b00"/85, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) munlockall() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r5, 0x400, 0x2) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f00000001c0)={0x0, 0x1, 0x8, 0x3, 0x0, 0x0, 0x0}) unshare(0x28000600) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x16, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000580)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r7}}, 0x10) 2m0.69757811s ago: executing program 32 (id=910): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="310000004820b44393293cf6", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000200000e2ff0000000000007e000000000000009cd99b0c4953e4d7a2ac40ff90262ed187c23f278773ffd6ecf2bc7f8bbb6360571d4c1f1a15f4a0258b00"/85, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) munlockall() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r5, 0x400, 0x2) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f00000001c0)={0x0, 0x1, 0x8, 0x3, 0x0, 0x0, 0x0}) unshare(0x28000600) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x16, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000580)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r7}}, 0x10) 1m25.859664586s ago: executing program 5 (id=1194): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, 0x0, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b45, 0x1) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r5 = dup(r4) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f00000019c0)=ANY=[@ANYBLOB='dots,errors=continue,nodots,dmask=00000000000000000077777,nodots,dots,nodots,showexec,dots,sys_immutable,discard,dots,nodots,nodots,dots,nodots,dots,nfs,dots,dots,dots,dots,nodots,nodots,nodots,quiet,dots,nodots,gid=', @ANYRESHEX=0x0, @ANYRESHEX, @ANYBLOB="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", @ANYRES32], 0xfd, 0x1d7, &(0x7f00000017c0)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r9 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f00000001c0), &(0x7f0000000080)=@tcp6=r9, 0x2}, 0x20) finit_module(r5, 0x0, 0x5) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x5, 0x2fd, 0xffff, 0x101, 0x300}}) 1m25.655541228s ago: executing program 5 (id=1198): r0 = socket(0x1e, 0x4, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000240)="5498a59e4a69c8d3a1e915cefad460f41989d32dbad56e11b6e406aa82b32f15659baac7d3f9c05b9e8e74ceb77e1257ef74a7cbb7b2c172fecb7e4b60a8ff2c3bb602e3aeec5ea80927303f9efdad6486a85088e3107b4250aed034b0117d7779d1d40b89d8201664f4be5dda1ae6c6bfcb3c5c722b2cbd93cfe8789165560d4182f1d639b47ff9da2b011dcb7393dee2c5d1d5b39a6197a9e6dd8189cd9912683a4240f1ddcf015d3e4d32879a02667c9a759ad5b8b777dda65cbd8ed31a9a08963290307fdd5339fe360325f07392bfe671e6a52180714457d8fb7e7a4d9525961de509a7c9555a096658dcfd745c3ca18d133b9f", 0xf6}, {&(0x7f0000000440)="c71951e14e7471036a2e63a3723757f82391b0a515182465341494b17773dee3533cb524b927b0cb929ecd2bb3381847e6d02bc16fe760b0485c53d57599469faafd389aaa105af1c83c728753edc49f6f626a20a3ae44be047891b7a61e18b1d6535a79f93c09f9b44cdafd9992fa59d0419b32301f07ce5a6c8af296e27252f05bd07ad40a9da5816caea7887fd5241ffe8b46be5b9c75644bce50b0c056af6c07dc99774954b151b91277d023e6ec77e61ee89df13da6b1b545a7e526f5ce948c52c7181fc6a09bbeedfe7e33d15dfa", 0xd1}, {&(0x7f0000000540)="cf8a552a816cf718833272c5ee1b73857383abcd8518c46387d473bb5e1c0146da6df0a3f1e040c2e17f8f73603cab4313dd778bdcf03cbc193e25d05980b183fbfaa586353129a590ad232307d59b3ef56690445795c964519d45df3b746b341a6aa522d6dfa5ea4b16913233b296efaaeced8eaaead856fa58c8bec63dfcd8208ed489350f27e3ea2085eaae82fa4eaf9903dc64a2c3fb8079bf02c6a44d2edaee5592cde206b06caa48de5f7bc44e624685a279213f83b3f28101c6bf134f8c2cf9114d4c236169fb7ea1a36a5f3345ea97527748fabbae58ca7edfaca5d947dccffd02da9c22f3127495bdab973065146a0e", 0xf4}, {&(0x7f0000004140)="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", 0x1000}, {&(0x7f0000000640)="4325e0caa25d3c0a109008e7ba9f4cc0710c19e64de94b60706fd0ae94b451e1155096291a6691413af1153c1b3dbad3a22ed7ad7a28dd75f743e0b4a0d7840d78bcde6c5217f29b75b50529f8e1ae6c0a3b87485641c11f5853489b983e420dc4a73e", 0x63}, {&(0x7f00000006c0)="19c3b0cb550696bd7debad2ad1ade3ed169ec57726dbc762289dd787f9ec60b9d522c7bd10246b37bdc65bfeb6ffc1de59eb5917cc35eaa2b3b060e6a47080e9b734adf825530e0c791ed2a00a7810ea99498e631740553d6ef84bbb7ae83239ec7c4d82b11ff110e06c781b5493719f0e", 0x71}, {&(0x7f0000000740)="b08b3c93e74f939a18e902f32d7c1e7022cfb0da889877020695730cc6902aec4517f28ff3767047a5a74fe1b1daad8cee021bd64621f63c6104f2e5dd20917366caf11fc36bd521f72062fcc7734d53ef5344699f62286d4c124f82b5f275ce32d2f588", 0x64}], 0x7, &(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="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"], 0x1b8}, 0x4000000) r2 = socket(0xa, 0x3, 0x3a) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = msgget$private(0x0, 0x100) msgsnd(r3, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0xc56, 0x0) msgsnd(r3, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0xfd1, 0x0) connect$pppoe(r2, &(0x7f0000000b00)={0x18, 0x0, {0x3, @remote, 'wlan0\x00'}}, 0x1e) msgctl$IPC_SET(r3, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x20050800) msgctl$IPC_RMID(r3, 0x0) 1m25.506428489s ago: executing program 5 (id=1200): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000400)={0x1, 0x1, 0x14, 0x3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r5, &(0x7f00000000c0)=""/4092, 0xffc) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x5453, 0x7cb7562f2d67) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000980)={&(0x7f0000003000)={[{&(0x7f0000000200)="6b94e90fa0bd736bad718caf185cf7b5947b6c42eb1ef7", 0x17}, {&(0x7f0000001400)="62762505c3d6a70f95593e64ee26215c230d096cbd72827dcb2cf49d8d5d9ba49d175364917b87d9b8b69770c7b83efaff0d1a00df58b6304baf88ccfc57d42785113222412af3c90f71553dbdbc9d3bf8f1aef5368ed3aea753581d7f4bcc5a6cedefaf8fe267464583ad0b4ea0673acf7d9aee7ff688a00bff4645c769e65486c413e7b881822ceeacba8d27f1cf3ed3f1d7ac535485c8c919cec955d236e19bebdef9a3bf9ad72c554f1199be5047fb1053d78363812b2a9ec7210c51d5e7cae4853b226f5f69695e5bf0c4f464", 0xcf, 0x1}, {&(0x7f0000002280)="1e5aa2c5ff93c4e3d9aaefc0babf3949b91a3c41463dba26c72958d82cde092ab3d033ca1f46a769011a1ae011dc86d9955082dcd5999016fa5b224aa2dca97792dfdac37c37492119a7f292aa6aa6b1e49d86ff46e0900a05942292c9819e02b93bafd7fe07a5f936372b6f02bce75dcab236928d88460a4371b0a74ac23fe22d6da9b7abae0407e3874b2860f35df4132a16884207f49ff6729ac440470824d748168729ffd63ab6593c2f72605d07c82af5063c6d867b5c10a0c373ae964549fdfe7693b6ba4b8d0f06cd73ba6d36596858c24a0d00"/234, 0xea, 0x3}, {&(0x7f00000005c0)="4c261aa4569f71f66bb01fc136dc2119ae15cad6d7dd097d102ab41a267cfa84625b0e361d9306214817386b2c429d0aa28cbdec120d835a8d308eb790bbfd104c08cbd4c77d28c474b45473aa00325aeaaa60895be52c8c795a3b3bea52f10c5e0ca1b995789607a6682242dd1cd2dd10a986b45a96c773d19b007c592217dd886534fa5b6f9a859de45ec4972360bc5dd012b153c0f4ac0a2745cd582ad5a5c34c16d5c39bfc09d0fbce59224a442f064b658572cb8e26d6cb1a4a9f9c656a", 0xc0, 0x1}, {&(0x7f0000002040)="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", 0x123, 0x1}, {&(0x7f0000000740)="1dcf2bdca43eb3500905024fbb78f16f53052bfba4122b561727ddfadbb5502e6d917a1a0937b2efec305f4aab196f5eee179260f0e8433258410993ec869599f906a96774ccd84e3dabd6088b0915c5b119d877d2151ca42c070f04165422a4e947e8410000000000", 0x69}, {&(0x7f00000011c0)="894d5b84c336dc434686881817ab0edde678c4605c0834b7adcc83439aa491b1b683fc0735e40cfbc17bd02fdaef1b90cab984a74296b53b5ca49fb3c35659d8b22ab1f6d91f356da3a4e55fd2370fc8aec3d722cfa12577e7d05261bc8ce236c03fada830f7765169774afb59600a7185d7836bae5c66f0ee8aac7fc20fa0976571d8ddc4325ae8f96a8c9b06d5af2c73f6a5e977ebe32f596a93d7bd8489df0507fdbeecc81adfdde05839891b246d2ba7f6297486654e447101fdfece90242bffc7baf93facd9426ccd05a69feda6a74d5e00354bfe2d0887bbb1fb49426cb1aa99cfb782aec607bc5b17837000ec032b69cf3093", 0xf6}, {&(0x7f0000002000)="47f371f581f9f06ef656d24aed42235e8a50ac64390c286bd60eb5210db6fc0ad2752c7a162f9b7de9e8e967a15e87705b09d981bd2d1be60b6dc02f4dc2ea5e", 0x40, 0x1}, {&(0x7f0000000900)="daffd5bd74b214feb3ae8efb3aae2733c68a8f70a3774f901c431ddaf143862903e56913441b5e789594476cc38d81b24c45693b83ab7b4d31c1cec3dff783c8f710f58bcd839256d9d9e29433478bc7d9d9c48814f01f1b84b2d4ce36a36337873e480916f3f501d35f578d6a169b28fc43ca4f61ef89e6", 0x78, 0x1}]}, 0x9, 0x3}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) clock_settime(0x5, &(0x7f0000000b00)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0001000000000000b7080000000010007b8af8ff00000000bfa2000000000007020000f8ffffffb703000008000000b704000000000000850900000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m25.40743668s ago: executing program 5 (id=1203): r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, 0xfffffffffffffffd, 0xbb) r5 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x378, 0x1) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) readahead(0xffffffffffffffff, 0x4, 0x81) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 1m23.928661782s ago: executing program 5 (id=1213): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = dup2(r1, r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002b00)={0x0}, 0x1, 0x0, 0x0, 0x4000883}, 0x4052004) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={0x0, 0x4}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x26ca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x8, &(0x7f00000002c0)=0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) io_submit(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2060) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, 0x0, 0x0) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x100, 0x100}}) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00', 0x40) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m23.330729647s ago: executing program 5 (id=1217): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) timer_create(0x2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x3, 0x2}, {0x8000000000000000, 0x1, 0x0, 0x0, 0x5, 0x7}, {0x0, 0x200}, 0x0, 0x10, 0x1, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x3c}, 0xa, @in=@empty, 0x3507, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4083, 0xff3}], 0x1, 0x31, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) sendmsg$NFT_BATCH(r1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000640)=0x6, 0x4) 1m23.287165477s ago: executing program 33 (id=1217): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) timer_create(0x2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x3, 0x2}, {0x8000000000000000, 0x1, 0x0, 0x0, 0x5, 0x7}, {0x0, 0x200}, 0x0, 0x10, 0x1, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x3c}, 0xa, @in=@empty, 0x3507, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4083, 0xff3}], 0x1, 0x31, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) sendmsg$NFT_BATCH(r1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000640)=0x6, 0x4) 4.191348116s ago: executing program 3 (id=1960): socket(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000500)='autofs\x00', 0x0, &(0x7f0000000280)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p)1\x00u\xa5\x8c\n\x91l\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]\xc6\x0f\x9a\xf5)g\x8c\x98\x9e\xe6\x9b\xbd\x96\xc3\xb6}3\x98r\\.o\xe0\xee\x1d\x80\x0f\x8c\xa0%>]\x9a{=\xdd\x80\x13.\x96\xf9]u\x96P\xdb+A\xaa\xce\x9dP\xde\v\x16\x1d\x05\xbe\xd3\x8c\x99\xb2\x1b\xccX\xfdy\x05\xb0Q]bB') socket$igmp(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x4, &(0x7f0000000380)={0x0, 0x10, 0x2}, &(0x7f00000003c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa041, 0x0, 0x20000, 0xfffffffffffffffd, 0x7, 0x2, 0xd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000100)=@sg0, 0x0, &(0x7f00000002c0)='./bus\x00') 4.095951117s ago: executing program 3 (id=1963): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r3 = eventfd2(0x9, 0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) io_destroy(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x200002ac, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xaa75fbb4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r4}, 0x18) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000440)) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r9 = io_uring_setup(0x4dd0, &(0x7f0000000580)={0x0, 0x1670, 0x0, 0x0, 0x3d3}) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r10, 0x5425, 0x0) ioctl$TCSETSW2(r10, 0x5425, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x6}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x1ff, @remote, 0x10000006, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10"], 0x10}}], 0x2, 0x20000010) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 3.431025623s ago: executing program 3 (id=1970): r0 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x3500, 0x5dd8, 0x0, 0x9, 0x5, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20000600) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x4, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100000000001400048005000300070200000500030001000000000000a00008801c00078008008500020000002a00060000000000080005"], 0xe0}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffff7ffffe9}, 0x18) pwritev(r9, &(0x7f0000000280), 0x31, 0x804, 0x8001) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.080205905s ago: executing program 2 (id=1974): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x80000000}]) io_getevents(r8, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x0, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x1, 0x1c, 0x0, {0x0, r10}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.057742655s ago: executing program 3 (id=1975): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000500)='autofs\x00', 0x0, &(0x7f0000000280)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p)1\x00u\xa5\x8c\n\x91l\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]\xc6\x0f\x9a\xf5)g\x8c\x98\x9e\xe6\x9b\xbd\x96\xc3\xb6}3\x98r\\.o\xe0\xee\x1d\x80\x0f\x8c\xa0%>]\x9a{=\xdd\x80\x13.\x96\xf9]u\x96P\xdb+A\xaa\xce\x9dP\xde\v\x16\x1d\x05\xbe\xd3\x8c\x99\xb2\x1b\xccX\xfdy\x05\xb0Q]bB') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) socket$igmp(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x4, &(0x7f0000000380)={0x0, 0x10, 0x2}, &(0x7f00000003c0)=0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000580)={{0x0, 0x989680}, {r5, r6+60000000}}, &(0x7f0000000680)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) r8 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa041, 0x0, 0x20000, 0xfffffffffffffffd, 0x7, 0x2, 0xd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000100)=@sg0, 0x0, &(0x7f00000002c0)='./bus\x00') connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x800000, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) 2.799890327s ago: executing program 3 (id=1979): r0 = socket(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000500)='autofs\x00', 0x0, &(0x7f0000000280)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p)1\x00u\xa5\x8c\n\x91l\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]\xc6\x0f\x9a\xf5)g\x8c\x98\x9e\xe6\x9b\xbd\x96\xc3\xb6}3\x98r\\.o\xe0\xee\x1d\x80\x0f\x8c\xa0%>]\x9a{=\xdd\x80\x13.\x96\xf9]u\x96P\xdb+A\xaa\xce\x9dP\xde\v\x16\x1d\x05\xbe\xd3\x8c\x99\xb2\x1b\xccX\xfdy\x05\xb0Q]bB') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) socket$igmp(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x4, &(0x7f0000000380)={0x0, 0x10, 0x2}, &(0x7f00000003c0)=0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000580)={{0x0, 0x989680}, {r5, r6+60000000}}, &(0x7f0000000680)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) r8 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa041, 0x0, 0x20000, 0xfffffffffffffffd, 0x7, 0x2, 0xd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000100)=@sg0, 0x0, &(0x7f00000002c0)='./bus\x00') connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./bus\x00', &(0x7f0000000300), &(0x7f0000000340)='./bus\x00', 0x6, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x800000, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) 2.716870788s ago: executing program 3 (id=1982): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r3], 0x20, 0x6044}, 0x6) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB="0400050f00060000080000000000", @ANYRESHEX=r1, @ANYRES32=0x0], 0x12) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x7}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) r6 = syz_clone(0x800000, &(0x7f0000000240)="bcd558eaddd9883e87ec7b8362af26e6522d3191654f03d675df5e92cf4ad7ca6f9c8c942fa7461e86376116c37336f78a5a33b6b4fde5d85917fbbe8332a9a438fe6ac9c7f8a6", 0x47, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000540)="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") prlimit64(r6, 0x9, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x5) gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x2) 2.563120769s ago: executing program 2 (id=1984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d8, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x4, 0x20000, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000001440)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000003140700000000000000df250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) fsmount(0xffffffffffffffff, 0x1, 0xa) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x14806, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x1, 0x72d, &(0x7f0000000d00)="$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") 2.46207063s ago: executing program 6 (id=1987): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x4, &(0x7f0000000380)={0x0, 0x10, 0x2}, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./bus\x00', &(0x7f0000000300), &(0x7f0000000340)='./bus\x00', 0x6, 0x0) 2.398709841s ago: executing program 6 (id=1988): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000500)='autofs\x00', 0x0, &(0x7f0000000280)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p)1\x00u\xa5\x8c\n\x91l\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]\xc6\x0f\x9a\xf5)g\x8c\x98\x9e\xe6\x9b\xbd\x96\xc3\xb6}3\x98r\\.o\xe0\xee\x1d\x80\x0f\x8c\xa0%>]\x9a{=\xdd\x80\x13.\x96\xf9]u\x96P\xdb+A\xaa\xce\x9dP\xde\v\x16\x1d\x05\xbe\xd3\x8c\x99\xb2\x1b\xccX\xfdy\x05\xb0Q]bB') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) socket$igmp(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x4, &(0x7f0000000380)={0x0, 0x10, 0x2}, &(0x7f00000003c0)=0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000580)={{0x0, 0x989680}, {r4, r5+60000000}}, &(0x7f0000000680)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa041, 0x0, 0x20000, 0xfffffffffffffffd, 0x7, 0x2, 0xd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000100)=@sg0, 0x0, &(0x7f00000002c0)='./bus\x00') connect$netlink(0xffffffffffffffff, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./bus\x00', &(0x7f0000000300), &(0x7f0000000340)='./bus\x00', 0x6, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x800000, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) 2.343746921s ago: executing program 2 (id=1989): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r6, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r5, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f0000000000)={0x1, 0x2, 0x0, 'queue0\x00', 0x3}) r7 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.325682731s ago: executing program 6 (id=1990): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xcc884c1da9a4b356, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000000}, 0x3000c010) bind$rds(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[], 0x48) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, &(0x7f0000000140)) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 2.091898313s ago: executing program 2 (id=1994): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futimesat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) fstatfs(0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000000fd00002c7266646e6f", @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',debug=0x0000000000000005,\x00']) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x9, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0x677, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000700)="e4a601e2c794f73d35acedf6c374babbf5cb2e2c061d7f794bec0086411471cd0d03010c000000282ffce6a3396d13d1a664b1ded217e35934f1bc4d5c99", 0x3e}], 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r7, 0x26, &(0x7f00000031c0)) fcntl$lock(r7, 0x26, &(0x7f0000000080)) close_range(r6, 0xffffffffffffffff, 0x0) 1.581186167s ago: executing program 0 (id=1996): unshare(0x22020600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x102, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000064b4fa0edf2df6a72034dc9a00", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x81}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r6) r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$selinux_access(r7, &(0x7f0000000680)={'system_u:object_r:dhcp_etc_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x1}, 0x53) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KDGKBTYPE(r4, 0x4b48, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.580131777s ago: executing program 1 (id=1997): r0 = gettid() sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x4, 0xd, &(0x7f0000001bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r2, 0x4b67, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000015c0)='./file1\x00', 0x0, &(0x7f0000001d40)={[{@delalloc}, {@noblock_validity}, {@barrier}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@data_err_ignore}, {@nombcache}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) pwritev2(r6, &(0x7f0000000000)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x2, 0xced4, 0xc) r7 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001580)={&(0x7f00000013c0)="88cdddfe2a78c2fcd5125b7404ab2ea3c55dbdfd092fd2bfd51c3d247cd11399ef58b042384c1e360e57b72ed478602e6d35f5534eb19947717f5a26176fceaa8e2ce492134b44394bd6b4c55aeff92a93ae1323cec97123d244ef1484e5be0851886322d8a20efed578d3deeee0ec7ac3acdec54e746f", &(0x7f0000001440)=""/71, &(0x7f00000014c0)="2eae", 0x0, 0x0, r4, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.398267279s ago: executing program 1 (id=1998): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x4, &(0x7f0000000380)={0x0, 0x10, 0x2}, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./bus\x00', &(0x7f0000000300), &(0x7f0000000340)='./bus\x00', 0x6, 0x0) 1.357460959s ago: executing program 1 (id=1999): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, 0xffffffffffffffff, 0x56a48000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file1\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB="c25e4945ecc0ad5f1773574468ff7ffd5551ea2bf75045355ea78b6a21fe1ce015b74c06833a5c6d60bd9dcd2ff673f41f8069fad189247e7649ba6e1ce6ef62e7085f1508230d72656ec89a7073c941123fda933abb98b1eba03c791116174da716bc26301f26e4edc4496d674dc2c6eceb5ce28e8f83bfbb293bfcc440e8ec208f5467a3a3255c9b3821e06a1d5125ec64db0b3492ac91ac131a78429469facba39f47bfbd7a0d5492adcbefc7cf486275ac7f33d8dc6a372f3af1365fda"], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e31, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xb37a24e4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000000c0)={[{@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x521, &(0x7f0000000640)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.300571669s ago: executing program 0 (id=2000): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000500)='autofs\x00', 0x0, &(0x7f0000000280)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p)1\x00u\xa5\x8c\n\x91l\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]\xc6\x0f\x9a\xf5)g\x8c\x98\x9e\xe6\x9b\xbd\x96\xc3\xb6}3\x98r\\.o\xe0\xee\x1d\x80\x0f\x8c\xa0%>]\x9a{=\xdd\x80\x13.\x96\xf9]u\x96P\xdb+A\xaa\xce\x9dP\xde\v\x16\x1d\x05\xbe\xd3\x8c\x99\xb2\x1b\xccX\xfdy\x05\xb0Q]bB') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) socket$igmp(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x4, &(0x7f0000000380)={0x0, 0x10, 0x2}, &(0x7f00000003c0)=0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000580)={{0x0, 0x989680}, {r4, r5+60000000}}, &(0x7f0000000680)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa041, 0x0, 0x20000, 0xfffffffffffffffd, 0x7, 0x2, 0xd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000100)=@sg0, 0x0, &(0x7f00000002c0)='./bus\x00') connect$netlink(0xffffffffffffffff, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./bus\x00', &(0x7f0000000300), &(0x7f0000000340)='./bus\x00', 0x6, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x800000, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) 1.19419159s ago: executing program 0 (id=2001): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d8, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x4, 0x20000, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000001440)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000003140700000000000000df250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) fsmount(0xffffffffffffffff, 0x1, 0xa) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x14806, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x1, 0x72d, &(0x7f0000000d00)="$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") 1.056441891s ago: executing program 6 (id=2002): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0xf7}, 0x18) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYRES16=r4, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB="59f61a9413f94aa64cb5d43df41892471eea22a4100b14997bc230ccecb186d86ad28081b36b445f7771c18e767c7b2bff15b01ab33168299b3388595b"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r7 = syz_open_dev$usbfs(&(0x7f0000000200), 0x77, 0x101701) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000000)) fcntl$lock(r10, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4000007fffffff}) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f00000001c0)={0x40, 0x1, 0x8, 0x3, 0x0, 0x0, 0x0}) r11 = socket$kcm(0x10, 0x2, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r13 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r13, 0x0) fallocate(r13, 0x0, 0x0, 0x400) io_setup(0x400, &(0x7f0000000040)) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) close(r0) 1.040744011s ago: executing program 0 (id=2003): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000009e, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095", @ANYRESOCT=0x0], &(0x7f0000000300)='GPL\x00', 0x800000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(0xffffffffffffffff) r5 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1400}, {}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x7f, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x5, 0x400, 0xe7}, 0x10, 0x0, r0, 0x4, &(0x7f0000000900)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000940)=[{0x5, 0x2, 0xb, 0xb}, {0x4, 0x1, 0x7, 0x1}, {0x3, 0x4, 0x9, 0x7}, {0x3, 0x2, 0x2, 0xa}], 0x10, 0x8a9c, @void, @value}, 0x94) r7 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xf6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc91542382b09e080}, 0x40db, 0x0, 0x4, 0x8, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000000)='cpu<=0||!') 1.030070782s ago: executing program 6 (id=2005): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') getdents64(r0, 0x0, 0x43) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0e00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000df00b6159d6f005125834c391d4338eef45e8c6e3cc93d850daa351f29e1f9f71a288ad47b912537ac0aca11d3fa6ebf11708f10f377ab431622488ceea7e6be92ad9c48df610e6943a45b34d97adeb53f5bef51579d978832dae5b7b8da51c33d3f32e23347909d62b20d1ceca1a173ccb15ae9419ad544d08066c2da0254e0c78a9dbf9f3c3112a3a03e5d95f589ffd7c40e4ff8cdc047cf86f7490b14492e663f98ddd83121de7112725f98ee5c29ba4ce8026390e84b0a8300545f33df46f4a3b76b40406b1ba0219bb2039c51e0335990223bbcf8211120e3c2847ca40add3bb2872d77bdaaa857e7ef7797ce809b340ad70904bd5db7acb3a07869678de1682e396b6af334ba2c1e1638e50ef4a4d2fcd80caa3961378bd0c2368041049705625cf7298e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00', 0x2, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r6 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @empty}, "001863718e9bf703"}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x13, 0x45, [@private=0x7, @empty, @empty, @local]}, @timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x0]}]}}, {{0xfffe, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) pipe(&(0x7f0000000080)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b040000000000005f007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028005002600020000000c002e"], 0x48}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x1}, [{0x2, 0x5}], {0x4, 0x4}, [], {0x10, 0x6}}, 0x2c, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bind$unix(r1, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) 822.946263ms ago: executing program 2 (id=2006): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000500)='autofs\x00', 0x0, &(0x7f0000000280)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p)1\x00u\xa5\x8c\n\x91l\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]\xc6\x0f\x9a\xf5)g\x8c\x98\x9e\xe6\x9b\xbd\x96\xc3\xb6}3\x98r\\.o\xe0\xee\x1d\x80\x0f\x8c\xa0%>]\x9a{=\xdd\x80\x13.\x96\xf9]u\x96P\xdb+A\xaa\xce\x9dP\xde\v\x16\x1d\x05\xbe\xd3\x8c\x99\xb2\x1b\xccX\xfdy\x05\xb0Q]bB') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) socket$igmp(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x4, &(0x7f0000000380)={0x0, 0x10, 0x2}, &(0x7f00000003c0)=0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000580)={{0x0, 0x989680}, {r5, r6+60000000}}, &(0x7f0000000680)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) r8 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa041, 0x0, 0x20000, 0xfffffffffffffffd, 0x7, 0x2, 0xd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000100)=@sg0, 0x0, &(0x7f00000002c0)='./bus\x00') connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./bus\x00', &(0x7f0000000300), &(0x7f0000000340)='./bus\x00', 0x6, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x800000, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) 741.862784ms ago: executing program 2 (id=2007): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) mknod$loop(0x0, 0x100000000000600d, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x40, 0x1, 0x40, 0xfc, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x2, 0xfffffffc}, 0x1100, 0x5dd8, 0x2, 0x1, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r6, 0x0, 0x88000cc, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) fcntl$setpipe(r5, 0x407, 0x100004) write$eventfd(r5, &(0x7f0000000240), 0xffffff14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000f30f0000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r9, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 370.699307ms ago: executing program 6 (id=2008): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x78, 0x10}) sendfile(r2, r1, 0x0, 0x7ffff000) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000001c00)={{0x1, 0x0, 0x9, 0xc7d1, 0x60000, 0x3ff}, 0x247, [0x46dc, 0x8, 0x4, 0x2, 0x6d5, 0x4, 0x6, 0x4, 0x6, 0x6, 0x0, 0x5, 0x4, 0x80000000, 0xb, 0x7, 0x7ff, 0x5, 0x8, 0x4, 0x1, 0x9, 0x9, 0x9, 0x9, 0x4, 0x5, 0x2, 0x5, 0x294d, 0x3, 0x6, 0x9, 0x8, 0xf, 0xfffffffc, 0x4, 0x0, 0x8, 0x3, 0x6, 0x6, 0xf, 0x1, 0x7, 0x2, 0x0, 0x35, 0x7ab, 0x7, 0x7fff, 0x7fffffff, 0x2, 0x4, 0x1, 0x200, 0xf, 0xff92, 0x9, 0x5, 0xd, 0x1, 0x9, 0x6, 0x40, 0x833, 0x2, 0x8, 0x1000, 0x2, 0xfffffff8, 0x178, 0x1, 0x2, 0xffffc551, 0x3, 0x6, 0x9, 0x7fffffff, 0x8000, 0x3, 0x4, 0x2, 0x4, 0x1, 0x3, 0x3, 0x0, 0x9, 0x8d3, 0x0, 0x1, 0x200, 0xd, 0x800, 0x8001, 0x3ff, 0x5, 0x7, 0x4624, 0x8, 0x1, 0xaa7, 0x10, 0x4, 0x5, 0x7, 0x401, 0x1b63cc3e, 0x5, 0x8001, 0x1, 0x3, 0x7, 0x3, 0xfffffff7, 0xb, 0x5, 0x4, 0xa, 0x9, 0x0, 0xffff, 0x1034, 0x0, 0x9, 0x9, 0x4, 0x8, 0x7fff, 0xe3d7, 0x6, 0x400, 0x5, 0x0, 0xb, 0xffffdbe3, 0x20000000, 0x2, 0x1, 0x3, 0x6, 0x100, 0x3, 0x0, 0x3, 0xe9, 0x3, 0x3, 0x1, 0x0, 0x0, 0x7fffffff, 0x10001, 0xa, 0x5, 0x6, 0x2d, 0x6, 0x6, 0xc000, 0x3, 0x73e9, 0x7, 0x3, 0x0, 0xffffff00, 0x4, 0x9, 0x7, 0x0, 0x1, 0x7, 0x9, 0xc8c, 0x80000001, 0x0, 0x8, 0xa3db, 0x6, 0x2, 0x0, 0x43e7, 0x8001, 0x95, 0x2, 0x2, 0x9, 0x9, 0x5, 0x3, 0x9, 0x6, 0x0, 0xffff, 0x40b, 0xd970, 0x99, 0x1, 0x7, 0x4, 0xffffffff, 0x4, 0x80000001, 0x4, 0x1, 0x5, 0x8, 0x101, 0x5, 0xffff, 0x800, 0x7ff, 0x2, 0x800, 0x4, 0x343, 0x80000000, 0xa0e8, 0xb172, 0x9, 0x200, 0x8, 0x3, 0x3, 0x5, 0x80d, 0xc0000000, 0x100, 0x9, 0x10000, 0x5, 0x9, 0x7f, 0x4, 0x8001, 0x3, 0x4, 0x5, 0x0, 0xda, 0x4, 0xd8, 0xffffffff, 0x4, 0x5, 0x9, 0xfffffffb, 0xfffffffd, 0x9b4e, 0xc57, 0x6, 0xc, 0x3ff, 0x2, 0x2, 0x3, 0x4, 0x0, 0x9, 0x3, 0x7, 0x674b, 0x9, 0x80000, 0x0, 0x0, 0x5, 0xb784, 0x99a, 0x8, 0x18bc, 0x8, 0x10001, 0xff2f, 0x4, 0x7, 0x9, 0x9, 0x9, 0x5, 0xffffffff, 0x5cf, 0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x9, 0x9fc2, 0xb, 0x7, 0x9, 0x2, 0x1f7, 0x17, 0x2, 0x5, 0x4, 0x3, 0x9, 0x9, 0x3d5, 0x2, 0xf0, 0x9d, 0x10000, 0x7173, 0x8000, 0x4, 0x7, 0xb, 0x0, 0x800, 0xfffffffb, 0x7, 0x5, 0x3, 0x2, 0x400, 0x2, 0x5, 0x80000001, 0x2, 0xfffffffd, 0x1db, 0x3, 0x4, 0x5ec110a7, 0x5, 0x0, 0x401, 0x2, 0x100, 0x9, 0xfffffbff, 0x200, 0xcc, 0x4, 0x1ff, 0x9, 0x9, 0x8, 0xc, 0x4, 0x80000000, 0x3, 0x794a70aa, 0x401, 0x2, 0x4, 0x761, 0x6, 0x1, 0x302f, 0x17993fdd, 0x4, 0x0, 0x81, 0x6bf8, 0x4, 0x1, 0x2, 0xffffff4d, 0x4, 0x7, 0x8, 0x1, 0x100, 0xffff, 0x7, 0x2, 0x9, 0x2, 0x6, 0xffff8000, 0x2, 0x4a52, 0x5, 0x0, 0x80, 0x6000000, 0x7, 0x7, 0x5, 0xffff, 0x600000, 0xffffffff, 0x49b, 0x3, 0x4a9, 0x1, 0x1000, 0x8, 0x4, 0x9, 0x6, 0x6, 0xffffff80, 0x3d9c000, 0x4d, 0x449f89b0, 0x2, 0x7, 0x6, 0x2, 0xecbe, 0x5, 0x5, 0xfffffb87, 0x2, 0x61, 0x7, 0x9, 0x0, 0x9f7, 0x8, 0x3, 0xfffff370, 0x5, 0x5, 0x40, 0x900, 0x30f6ea9e, 0x6, 0x6, 0x2, 0x62, 0x9, 0x2, 0x9, 0x9, 0x5, 0x9, 0x4, 0x94, 0x7fffffff, 0x8, 0x10000, 0x101, 0x1, 0x80, 0x2, 0x7fff, 0x8, 0x1, 0x2, 0x4, 0x8, 0xe9a2, 0x9, 0x8, 0x80, 0x2, 0x3, 0x46bc5aee, 0x400, 0x55ee0, 0xa7d, 0xff, 0x8, 0x800, 0xd, 0x7, 0x100, 0xaf3b, 0xb84, 0x8, 0x1, 0x2, 0x6, 0x4, 0x6, 0x8000, 0x4, 0xff, 0xfffff01b, 0x42, 0x65aa, 0x8, 0x1, 0x2, 0x4, 0x1, 0x2, 0x9, 0x7fffffff, 0x0, 0x400, 0x4, 0x3, 0x40, 0xeda, 0x3, 0x2, 0x4, 0x0, 0x8, 0x81, 0x8, 0x1, 0x7, 0x7e, 0xfffffe01, 0x2, 0x7, 0x10000, 0x7f, 0x0, 0x7, 0xefdf, 0x10000, 0x4, 0x80000001, 0x6, 0xfff, 0x5, 0x9, 0xfff, 0x800, 0x6, 0x6e95, 0x5, 0x4a8, 0x6, 0xa, 0x4, 0x3, 0xfffffff3, 0x4a, 0xff, 0x6, 0xe3, 0x6000, 0xc8, 0xa68, 0x1, 0x7, 0x9, 0xad, 0x7, 0x8, 0x1, 0x3, 0x6, 0x3, 0x8, 0x5, 0x2, 0xc08, 0x0, 0x5, 0x4, 0xe, 0x8, 0x2d5, 0x5, 0x5, 0x2f, 0xa, 0x3, 0xda0e, 0x10000, 0x23d, 0x101, 0xfffffff9, 0xb81e, 0x9, 0xfffffff9, 0x5, 0x6, 0x6b3c, 0x1, 0x3, 0x40, 0x8, 0x9, 0x3, 0x6, 0x6, 0x8, 0x2, 0xb, 0x5, 0x2, 0x68cad995, 0x7f, 0x4, 0x1, 0x8, 0x5, 0x2, 0x3, 0x0, 0x1ff, 0x9, 0x8, 0x5, 0x609e9f8e, 0x3c7, 0x4, 0x7ff, 0x2, 0x7fff, 0x2, 0x5, 0x6, 0x800, 0x9, 0x6, 0x13e, 0x3, 0xdb, 0x80, 0x12c8000, 0x6, 0x7fffffff, 0x9cc, 0x4d7, 0xfffffc00, 0x5, 0x22a, 0x2, 0x4, 0x1, 0x400, 0x3b, 0x3, 0x5, 0x7, 0xe3c, 0x1, 0x7, 0xffff0abe, 0x7, 0x4, 0x8, 0x8, 0xffffff16, 0xbf, 0x800, 0x5, 0x5, 0x1ff, 0xa1fb, 0xfffffff8, 0x6, 0xc5ad, 0x3, 0x8, 0x7, 0x3, 0x9, 0xfff, 0x3, 0x4, 0xc4, 0x9, 0x1, 0x40, 0xffff2742, 0xe881, 0x200, 0x0, 0x2, 0xfffffffc, 0x1, 0x800, 0x47ab, 0x7fffffff, 0x7, 0x7, 0x7fffffff, 0x7, 0x1893, 0x5, 0x7fffffff, 0xffffffff, 0x9, 0x3, 0x1, 0xcc, 0x80000001, 0x8, 0x8, 0x4, 0x8, 0x101, 0x1d, 0x3, 0x8757, 0x9, 0x47c2, 0x9, 0x7, 0x5, 0xe0d, 0x7ff, 0x700000, 0xe, 0x2, 0x10100, 0x9, 0x8, 0x3, 0x1ff, 0x5, 0x4a73, 0x7fffffff, 0x764, 0x81, 0x200, 0x8001, 0x7fffffff, 0x7, 0x5, 0x0, 0xff, 0xa, 0x54a2f254, 0x8, 0x3, 0x80000000, 0x0, 0x6, 0x0, 0x3, 0x3, 0x9c69, 0xa6, 0x1, 0x8, 0x40, 0x8, 0x1, 0x5, 0x5, 0x3dc674d5, 0x5, 0x2, 0x8, 0x479, 0x3, 0xffffc5bc, 0x7, 0x8, 0x2, 0x3b3a, 0x10001, 0x6, 0x5, 0xa, 0x7ff, 0x8001, 0x5, 0x0, 0x4, 0x2900, 0xfe6, 0x5, 0x9, 0x2, 0x7, 0x9, 0x3, 0x5, 0x7ff, 0x6, 0x6, 0xffff7fff, 0x4, 0x6, 0xd3, 0x2, 0x3, 0x7fffffff, 0x7b6, 0x7, 0x2, 0x1, 0x10, 0x6, 0x800, 0x9, 0x372, 0x2, 0xfff, 0x8, 0x348a8e49, 0x8, 0xff000000, 0x7fff, 0xe0c, 0xcb2, 0x9, 0x3, 0x1, 0x9, 0x81, 0x98ba, 0x2a5, 0x80000001, 0x6, 0x7a0, 0xfffffffc, 0x401, 0x101, 0x0, 0x46a, 0x669e, 0x73da, 0x3, 0x8, 0x6, 0x84, 0x8001, 0x3ff, 0x5, 0x100, 0x7, 0x5, 0xe6, 0x0, 0x7, 0xffff, 0x80000000, 0x400, 0x1, 0x7fffffff, 0x9, 0x81, 0x5e, 0x7, 0x2968, 0x4b3, 0x9, 0xfff, 0x9f, 0x9a, 0x489c, 0xfffffffd, 0x9, 0x5, 0x10, 0x8, 0x800, 0x2, 0x1, 0x569, 0x2, 0x8, 0x0, 0x6, 0x5, 0x59ed, 0x4, 0x3, 0xff, 0x5ac, 0x67e74b46, 0x1, 0x7, 0x3ff, 0x7, 0x7, 0x4, 0x81, 0x7, 0x6099, 0x3, 0x80000000, 0x5, 0x1, 0x0, 0x7fffffff, 0x8a, 0x7, 0x7fff, 0xe, 0x8, 0x9, 0x5, 0x4, 0x9, 0x3, 0xfff, 0x4, 0x9, 0x1, 0x7, 0x5, 0x6, 0xffffffff, 0x3c27, 0x7, 0x1, 0x2, 0x5, 0x7, 0x2, 0xfffffff3, 0x3, 0xe5, 0xfffffff7, 0x0, 0x2, 0xa, 0x9, 0x9, 0x1, 0x8ee7, 0x81, 0x25, 0x3, 0x6, 0x4, 0x8, 0x5046, 0x5, 0xb5de, 0x8, 0x2ab, 0x7b3a, 0x52c8, 0x6, 0x6, 0x3, 0x5, 0x7, 0x1000, 0x6, 0x2, 0x2d, 0x1, 0x200, 0xd, 0x5, 0x7fff, 0x5, 0xffff, 0x100, 0x9, 0x7f, 0x4, 0x7fffffff, 0x0, 0xd8f, 0x9, 0xfff, 0xce7, 0x7, 0x0, 0x635c, 0x8, 0xfffffffa, 0xfffffff0, 0x9, 0x0, 0xfffffff9, 0x818, 0x1, 0x3, 0x0, 0x2, 0x5, 0x10000, 0xfd, 0x6, 0x800, 0x3, 0xfffffffa, 0x9, 0x3, 0x2, 0x1, 0x6, 0x2, 0x10, 0x1, 0x7, 0x0, 0x4d, 0x2, 0x9, 0x4, 0x5, 0x1, 0xf, 0x2, 0x8, 0x5, 0x87d, 0x8, 0x10001, 0x1ff, 0x9, 0x43, 0x10000, 0xc, 0x3f100, 0xfff, 0x0, 0xcb4, 0x3, 0x5, 0x4, 0x5, 0xa8cf, 0x2, 0x8, 0xfffffffe, 0x5, 0x1, 0x0, 0x4, 0x2, 0x1ff, 0x1, 0x4, 0x8000, 0xdb1c, 0x8, 0x80000000, 0x5]}) getgroups(0x1, &(0x7f0000000140)=[0xffffffffffffffff]) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r7}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 369.902207ms ago: executing program 1 (id=2009): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x12, 0x0, 0x5f, 0x2}, @volatile={0x2, 0x0, 0x0, 0x9, 0x2}, @fwd={0xe}, @var={0x5, 0x0, 0x0, 0xe, 0x5, 0x1}, @union={0x9, 0x1, 0x0, 0x5, 0x1, 0x303831ad, [{0x4, 0x1, 0xe205}]}, @var={0x2, 0x0, 0x0, 0xe, 0x1}, @var={0x3, 0x0, 0x0, 0xe, 0x1, 0x2}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x5, 0x2}, @float={0x6, 0x0, 0x0, 0x10, 0xc}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x7fffffff}}]}, {0x0, [0x2e]}}, &(0x7f0000000dc0)=""/4096, 0xbf, 0x1000, 0x1, 0xa7e, 0x0, @void, @value}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=@base={0x9, 0xeafa, 0x7fe2, 0x1, 0x220, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095003b29299a03ea0ed9d378bd8d01d5000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x10000000, 0x4, 0x10008, 0x5}], 0x10, 0xfffffff4, @void, @value}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r4}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r6 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @auto=[0x0, 0x74, 0x0, 0x0, 0x0, 0x62, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62]}, &(0x7f00000001c0)={0x0, "e2030013d278a1fc4a8d8c8eb43087655e4365991c3e1e6f89550928b7bc882f37d43e4bd36e0000438c04419900"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r6, &(0x7f0000000140)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex=r4, 0x26, 0x1, 0x642e, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex=r4, r8, 0x13, 0x8, 0x0, @void, @value=r5, @void, @void, r9}, 0x20) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f00000001c0)) r10 = socket$isdn(0x22, 0x3, 0x23) fdatasync(r10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x102, &(0x7f00000005c0)={@local, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xc8, 0x11, 0x0, @remote, @local, {[@hopopts={0x2c, 0x3, '\x00', [@ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @local}]}, @srh={0x3a, 0x10, 0x4, 0x8, 0x4, 0x0, 0x9, [@private1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @empty, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @rand_addr=' \x01\x00']}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x68}, @fragment={0x8, 0x0, 0x5, 0x1, 0x0, 0x1b, 0x65}], {0x0, 0x4e22, 0x8}}}}}}, 0x0) 173.985299ms ago: executing program 1 (id=2010): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x4, &(0x7f0000000380)={0x0, 0x10, 0x2}, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./bus\x00', &(0x7f0000000300), &(0x7f0000000340)='./bus\x00', 0x6, 0x0) 116.557059ms ago: executing program 0 (id=2011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x9014) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x40000000015, 0x800, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @empty}, 0x10) r6 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f00000000c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x80, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x80}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) 82.170569ms ago: executing program 1 (id=2012): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x8000) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f0000000700)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@discard}, {@errors_remount}, {@data_writeback, 0x0}, {@usrjquota}, {@noload}, {@jqfmt_vfsv1}, {@errors_continue}, {@usrjquota_path={'usrjquota', 0x3d, './file1/file4/file5'}}, {@noauto_da_alloc}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x4, r5, 0x1, 0x6}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000180)=""/79, 0x4f, 0x0, &(0x7f0000000200)=""/103, 0x67}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r7, 0x4) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000018c0)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3ff, '\x00', 0x0, r2, 0x0, 0x6, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001980)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0xd, 0x9, &(0x7f00000017c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xeb46}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xc}, @ldst={0x1, 0x1, 0x4, 0xa, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x3c, &(0x7f00000001c0)=""/60, 0x41100, 0x34, '\x00', r5, @sock_ops=0x3, r0, 0x8, &(0x7f0000001840)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, r7, r8, 0x3, &(0x7f0000001a00)=[r9, r10, r11, r12, 0xffffffffffffffff, r13], &(0x7f0000001a40)=[{0x0, 0x3, 0x9, 0xb}, {0x4, 0x4, 0xc}, {0x1, 0x5, 0x4, 0x2}], 0x10, 0x10001, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r14 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r14, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) write$char_usb(r14, &(0x7f00000007c0)="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", 0x1000) ioctl$EVIOCGBITSW(r0, 0x40095505, 0x0) 0s ago: executing program 0 (id=2013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/protocols\x00') read$ptp(r3, &(0x7f0000000080)=""/51, 0x33) lseek(r3, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x18, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000003f70df000007010000f0ffffffb702000000000000182300000000000000000000000088a3fca0e97811412bc677b7175699643c1578aaab253b6a8c98550cd76b49ebe3162edd7c99fbabad79d37ca8601a9435cebaa75f9aa63cdf3cf21923c38c3e2eab391a3c792182a011ac4bea1926ed68fa7df076b8a26230b36cd5318abdda51711c0575618ea19a4d29a03f570737ce01aa245e0ad725f90e90f5ce4987c2aab104f47ddcdf7ba39710afd800", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{0x200000000006, 0x0, 0x3, 0x7ffc1f7b}]}) eventfd2(0x9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) syslog(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x3323, 0x7, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00", @ANYRES16=r1, @ANYBLOB="010027bd7000000000000c000000fc000380ee0004009b707617d223ea4b25b604b9231ea3bd3107350ce5ef8cb3984c953cefe4f8301bfc664cd430479518b54e3879c7d642ea2e39183a24047096d62433fdb406e055b4fc2911af59019ce9680378909779cfdc13ff6d86bb3ff7a5aa34399929c299a6a25a40fc482538f5cf2a38f68815caca7a4f9c6d71384d457a6d9a734b9dade92b0ef8517e5e081a607d8baf6b9a69f65a441e28485ffac82ea9c253b0a2cc457929fe74ba956d240e20b350fe8e63040c42857c45f981325e95326ff471197b66213b1caea1867583104fdcd73eddc698a6ea2dbe36ea018c05df636db60e86f373404d6977c3f8000008000200000000000c00018008000100", @ANYRES32=r2, @ANYBLOB], 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): 2lhOh'rK1\kU{!eܚ7 [ 225.595270][T10383] Ue[%#s' [ 225.626778][T10381] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 225.638303][T10381] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 225.648521][T10381] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1519: Corrupt directory, running e2fsck is recommended [ 225.663687][T10381] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 225.672744][T10381] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.1519: corrupted in-inode xattr: invalid ea_ino [ 225.689993][T10381] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1519: couldn't read orphan inode 15 (err -117) [ 225.710731][T10381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.714867][T10387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.746700][T10381] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 225.758327][T10381] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 225.768516][T10381] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1519: Corrupt directory, running e2fsck is recommended [ 225.785203][T10381] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 225.796736][T10381] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 225.806953][T10381] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1519: Corrupt directory, running e2fsck is recommended [ 225.824030][T10391] serio: Serial port ptm0 [ 225.835429][T10381] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 225.847046][T10381] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 225.857243][T10381] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1519: Corrupt directory, running e2fsck is recommended [ 225.935204][T10381] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 225.949831][T10381] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.1519: path /289/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 225.975035][T10381] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 8: comm syz.1.1519: path /289/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 226.018901][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.067352][T10408] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 226.067352][T10408] Ue[%#s' [ 226.148632][T10418] loop6: detected capacity change from 0 to 512 [ 226.168615][T10413] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.186143][T10418] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 226.193038][T10424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23824 sclass=netlink_route_socket pid=10424 comm=syz.2.1532 [ 226.218072][T10418] EXT4-fs (loop6): mount failed [ 226.222314][T10425] openvswitch: netlink: Message has 6 unknown bytes. [ 226.257390][T10427] 0XD: left allmulticast mode [ 226.281291][T10429] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 226.281291][T10429] Ue[%#s' [ 226.281762][T10427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.318239][T10427] batman_adv: batadv0: Interface activated: dummy0 [ 226.325073][T10427] batadv0: mtu less than device minimum [ 226.331037][T10427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 226.339384][ T29] kauditd_printk_skb: 967 callbacks suppressed [ 226.339398][ T29] audit: type=1326 audit(1749206564.864:21718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.2.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fb34d4fe929 code=0x7ffc0000 [ 226.341807][T10427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 226.347939][ T29] audit: type=1326 audit(1749206564.864:21719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.2.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34d4fe929 code=0x7ffc0000 [ 226.371281][T10427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 226.415637][T10427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 226.419227][ T29] audit: type=1326 audit(1749206564.914:21720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10430 comm="syz.2.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34d4fe929 code=0x7ffc0000 [ 226.426334][T10427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 226.460290][T10427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 226.470968][T10427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 226.489739][ T29] audit: type=1326 audit(1749206565.004:21721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10433 comm="syz.2.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb34d4fe929 code=0x7ffc0000 [ 226.513416][ T29] audit: type=1326 audit(1749206565.004:21722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.6.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeff9ce929 code=0x7ffc0000 [ 226.537221][ T29] audit: type=1326 audit(1749206565.004:21723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.6.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeff9ce929 code=0x7ffc0000 [ 226.579546][ T29] audit: type=1400 audit(1749206565.104:21724): avc: denied { map_create } for pid=10439 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 226.626523][ T29] audit: type=1400 audit(1749206565.134:21725): avc: denied { prog_load } for pid=10439 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 226.645280][ T29] audit: type=1400 audit(1749206565.134:21726): avc: denied { bpf } for pid=10439 comm="+}[@" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 226.665609][ T29] audit: type=1400 audit(1749206565.134:21727): avc: denied { perfmon } for pid=10439 comm="+}[@" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 226.715409][T10445] loop3: detected capacity change from 0 to 512 [ 226.725588][T10445] EXT4-fs: Ignoring removed nobh option [ 226.733692][T10445] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 226.745300][T10445] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 226.755445][T10445] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1538: Corrupt directory, running e2fsck is recommended [ 226.769279][T10445] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 226.777661][T10445] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.1538: corrupted in-inode xattr: invalid ea_ino [ 226.791289][T10445] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1538: couldn't read orphan inode 15 (err -117) [ 226.803669][T10445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.820056][T10445] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 226.831587][T10445] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 226.841698][T10445] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1538: Corrupt directory, running e2fsck is recommended [ 226.867188][T10445] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 226.878761][T10445] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 226.888887][T10445] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1538: Corrupt directory, running e2fsck is recommended [ 226.905297][T10452] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 226.905297][T10452] Ue[%#s' [ 226.926351][T10445] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 226.940374][T10445] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 226.950493][T10445] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1538: Corrupt directory, running e2fsck is recommended [ 226.980789][T10452] __nla_validate_parse: 17 callbacks suppressed [ 226.980803][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'. [ 227.006482][T10456] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1543'. [ 227.056908][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 227.069915][T10445] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 227.089540][T10445] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.1538: path /282/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 227.193522][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1554'. [ 227.252125][T10445] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 8: comm syz.3.1538: path /282/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 227.289852][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.322010][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'. [ 227.525457][T10481] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1544'. [ 227.552384][ T3403] IPVS: starting estimator thread 0... [ 227.686271][T10486] IPVS: using max 2592 ests per chain, 129600 per kthread [ 227.782471][T10489] serio: Serial port ptm0 [ 227.813595][T10493] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 227.813595][T10493] Ue[%#s' [ 227.841045][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 227.867568][T10491] loop6: detected capacity change from 0 to 764 [ 227.896063][T10496] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 227.896063][T10496] Ue[%#s' [ 227.927054][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1552'. [ 228.138222][T10501] loop2: detected capacity change from 0 to 512 [ 228.151911][T10501] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 228.161663][T10503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.178615][T10501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.191932][T10501] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.211195][T10501] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 228.227900][T10501] EXT4-fs (loop2): Remounting filesystem read-only [ 228.251151][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.270457][T10509] loop6: detected capacity change from 0 to 2048 [ 228.291550][T10511] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1556'. [ 228.305427][T10509] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.328499][T10509] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 228.358837][ T9024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.385210][T10518] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 228.385210][T10518] Ue[%#s' [ 228.460243][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1559'. [ 228.563698][T10530] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 228.563698][T10530] Ue[%#s' [ 228.612790][T10520] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 228.650493][T10534] loop6: detected capacity change from 0 to 128 [ 228.660059][T10534] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.679820][T10534] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 228.717930][T10538] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 228.717930][T10538] Ue[%#s' [ 228.765791][T10540] tipc: Enabling of bearer rejected, already enabled [ 228.775059][T10542] netlink: 'syz.6.1564': attribute type 30 has an invalid length. [ 228.888856][T10546] loop2: detected capacity change from 0 to 1024 [ 228.897293][T10546] journal_path: Non-blockdev passed as './file1' [ 228.903799][T10546] EXT4-fs: error: could not find journal device path [ 229.118446][T10551] loop3: detected capacity change from 0 to 512 [ 229.135022][T10551] EXT4-fs (loop3): 1 orphan inode deleted [ 229.141121][T10551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.154329][T10551] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.155207][ T5917] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:50: Failed to release dquot type 1 [ 229.177456][T10551] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 229.525964][T10558] net_ratelimit: 15 callbacks suppressed [ 229.525994][T10558] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 229.558189][ T3403] IPVS: starting estimator thread 0... [ 229.598846][ T9024] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.651569][T10561] IPVS: using max 2208 ests per chain, 110400 per kthread [ 230.185050][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.436490][T10577] netlink: 'syz.3.1584': attribute type 27 has an invalid length. [ 230.454932][T10577] vlan0: left promiscuous mode [ 230.459732][T10577] veth1: left promiscuous mode [ 230.465054][T10577] wireguard0: left promiscuous mode [ 230.470394][T10577] wireguard0: left allmulticast mode [ 230.481024][T10580] serio: Serial port ptm0 [ 230.499311][T10582] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 230.499311][T10582] Ue[%#s' [ 230.576898][T10590] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 230.576898][T10590] Ue[%#s' [ 230.636492][T10593] loop2: detected capacity change from 0 to 512 [ 230.651027][T10593] EXT4-fs: Ignoring removed nobh option [ 230.665642][T10593] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 230.677358][T10593] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 230.687531][T10593] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1575: Corrupt directory, running e2fsck is recommended [ 230.700160][T10586] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 230.711343][T10586] team0: Device macvtap0 is already an upper device of the team interface [ 230.713089][T10593] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 230.728560][T10593] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.1575: corrupted in-inode xattr: invalid ea_ino [ 230.742413][T10593] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1575: couldn't read orphan inode 15 (err -117) [ 230.755157][T10593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.775246][T10593] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 230.786972][T10593] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 230.797149][T10593] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1575: Corrupt directory, running e2fsck is recommended [ 230.812166][T10593] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 230.823708][T10593] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 230.833926][T10593] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1575: Corrupt directory, running e2fsck is recommended [ 230.850428][T10593] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 230.861935][T10593] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 230.872185][T10593] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1575: Corrupt directory, running e2fsck is recommended [ 230.913031][T10593] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 230.926003][T10593] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.1575: path /317/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 230.946394][T10593] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 8: comm syz.2.1575: path /317/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 230.995501][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.114258][T10608] openvswitch: netlink: Message has 6 unknown bytes. [ 231.156540][T10607] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.259547][T10615] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 231.315816][T10617] loop3: detected capacity change from 0 to 512 [ 231.322738][T10617] EXT4-fs: Ignoring removed bh option [ 231.329086][T10617] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 231.338157][T10617] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 231.360197][T10617] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 231.385072][T10617] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 231.394005][T10617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.459046][ T29] kauditd_printk_skb: 1002 callbacks suppressed [ 231.459060][ T29] audit: type=1400 audit(1749206569.995:22727): avc: denied { name_connect } for pid=10619 comm="syz.0.1598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 231.548691][T10622] loop6: detected capacity change from 0 to 1024 [ 231.589389][T10622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 231.609650][ T29] audit: type=1326 audit(1749206570.055:22728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeff9ce929 code=0x7ffc0000 [ 231.633314][ T29] audit: type=1326 audit(1749206570.055:22729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeff9ce929 code=0x7ffc0000 [ 231.656990][ T29] audit: type=1326 audit(1749206570.055:22730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faeff9ce929 code=0x7ffc0000 [ 231.680404][ T29] audit: type=1326 audit(1749206570.055:22731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeff9ce929 code=0x7ffc0000 [ 231.704006][ T29] audit: type=1326 audit(1749206570.055:22732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeff9ce929 code=0x7ffc0000 [ 231.708656][T10622] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 231.727594][ T29] audit: type=1326 audit(1749206570.055:22733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7faeff9ce929 code=0x7ffc0000 [ 231.741075][T10622] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 231.761428][ T29] audit: type=1326 audit(1749206570.055:22734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeff9ce929 code=0x7ffc0000 [ 231.772117][T10622] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.1585: lblock 2 mapped to illegal pblock 2 (length 1) [ 231.793168][ T29] audit: type=1326 audit(1749206570.055:22735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeff9ce929 code=0x7ffc0000 [ 231.809317][T10622] EXT4-fs (loop6): Remounting filesystem read-only [ 231.830654][ T29] audit: type=1326 audit(1749206570.055:22736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.6.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7faeff9ce929 code=0x7ffc0000 [ 231.861113][T10622] EXT4-fs (loop6): 1 orphan inode deleted [ 231.867621][T10622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.908667][T10626] loop1: detected capacity change from 0 to 512 [ 231.917234][T10626] EXT4-fs: Ignoring removed nobh option [ 231.923726][T10622] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.954481][T10628] loop2: detected capacity change from 0 to 164 [ 231.980785][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.996564][T10626] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.1586: corrupted inode contents [ 232.022516][T10626] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.1586: mark_inode_dirty error [ 232.030900][T10632] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 232.030900][T10632] Ue[%#s' [ 232.048600][T10626] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.1586: corrupted inode contents [ 232.078755][T10626] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1586: mark_inode_dirty error [ 232.099583][T10632] __nla_validate_parse: 21 callbacks suppressed [ 232.099597][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1590'. [ 232.119705][T10626] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1586: Failed to acquire dquot type 0 [ 232.131847][T10626] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1586: corrupted inode contents [ 232.145215][T10626] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.1586: mark_inode_dirty error [ 232.160250][T10626] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1586: corrupted inode contents [ 232.172572][T10626] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1586: mark_inode_dirty error [ 232.185102][T10626] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1586: corrupted inode contents [ 232.211231][T10626] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 232.229284][T10622] loop6: detected capacity change from 0 to 512 [ 232.253399][T10626] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1586: corrupted inode contents [ 232.270432][T10626] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.1586: mark_inode_dirty error [ 232.283472][T10626] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 232.293763][T10626] EXT4-fs (loop1): 1 truncate cleaned up [ 232.301218][T10626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.314096][T10626] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.315254][T10622] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1585: Failed to acquire dquot type 1 [ 232.341111][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1586'. [ 232.357519][T10626] openvswitch: netlink: Message has 6 unknown bytes. [ 232.387086][T10622] EXT4-fs (loop6): 1 truncate cleaned up [ 232.393200][T10622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.397972][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.407209][T10622] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.433289][T10622] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.464713][T10639] lo speed is unknown, defaulting to 1000 [ 232.703336][T10652] loop1: detected capacity change from 0 to 512 [ 232.711354][T10652] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 232.740430][T10652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.753198][T10652] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.196390][T10667] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 233.196390][T10667] Ue[%#s' [ 233.225187][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1599'. [ 233.363221][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.382719][T10673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23824 sclass=netlink_route_socket pid=10673 comm=syz.1.1601 [ 233.566938][T10682] ip6tnl1: entered promiscuous mode [ 233.603441][T10684] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 233.603441][T10684] Ue[%#s' [ 233.645192][T10685] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1603'. [ 233.681230][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'. [ 233.960110][T10690] loop1: detected capacity change from 0 to 512 [ 234.009299][T10690] /dev/loop1: Can't open blockdev [ 234.107982][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1611'. [ 234.136069][T10697] loop3: detected capacity change from 0 to 512 [ 234.151706][T10697] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 234.159716][T10697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 234.162169][T10700] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1612'. [ 234.169944][T10697] EXT4-fs (loop3): orphan cleanup on readonly fs [ 234.183927][T10697] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #13: comm syz.3.1610: iget: bad i_size value: 12154761577498 [ 234.186897][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1612'. [ 234.197210][T10697] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1610: couldn't read orphan inode 13 (err -117) [ 234.205487][T10700] tc_dump_action: action bad kind [ 234.223366][T10697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 234.241287][T10702] ipvlan2: entered promiscuous mode [ 234.247986][T10702] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 234.249295][T10694] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1610: dx entry: limit 65535 != root limit 120 [ 234.255985][T10702] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 234.266892][T10694] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1610: Corrupt directory, running e2fsck is recommended [ 234.303433][T10703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1613'. [ 234.349820][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1614'. [ 234.367366][T10707] loop2: detected capacity change from 0 to 128 [ 234.376987][T10705] bridge_slave_1 (unregistering): left allmulticast mode [ 234.384080][T10705] bridge_slave_1 (unregistering): left promiscuous mode [ 234.391134][T10705] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.406651][T10707] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.419892][T10707] ext4 filesystem being mounted at /322/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 234.504663][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.518049][T10712] netlink: 'syz.2.1615': attribute type 30 has an invalid length. [ 234.541288][T10716] loop3: detected capacity change from 0 to 256 [ 234.550078][T10718] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 234.550078][T10718] Ue[%#s' [ 234.577539][T10716] vfat: Bad value for 'fmask' [ 235.382528][ T3326] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.495520][T10736] loop1: detected capacity change from 0 to 1024 [ 235.522540][T10739] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 235.522540][T10739] Ue[%#s' [ 235.739171][T10736] journal_path: Non-blockdev passed as './file1' [ 235.745626][T10736] EXT4-fs: error: could not find journal device path [ 235.876856][T10746] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 235.876856][T10746] Ue[%#s' [ 236.126545][T10751] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 236.137629][T10755] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 236.137629][T10755] Ue[%#s' [ 236.608328][ T29] kauditd_printk_skb: 1225 callbacks suppressed [ 236.608343][ T29] audit: type=1326 audit(1749206574.673:23956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f550e929 code=0x7ffc0000 [ 236.638350][ T29] audit: type=1326 audit(1749206574.673:23957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2f550e929 code=0x7ffc0000 [ 236.662120][ T29] audit: type=1326 audit(1749206574.673:23958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f550e929 code=0x7ffc0000 [ 236.685728][ T29] audit: type=1326 audit(1749206574.673:23959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb2f550e929 code=0x7ffc0000 [ 236.712128][T10757] loop3: detected capacity change from 0 to 512 [ 236.733280][T10757] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 236.890239][T10763] loop6: detected capacity change from 0 to 512 [ 236.971936][T10757] EXT4-fs (loop3): 1 truncate cleaned up [ 236.978595][T10757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.179156][T10757] lo speed is unknown, defaulting to 1000 [ 237.671326][ T29] audit: type=1326 audit(1749206575.343:23960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f550e929 code=0x7ffc0000 [ 237.695104][ T29] audit: type=1326 audit(1749206575.343:23961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f550e929 code=0x7ffc0000 [ 237.718830][ T29] audit: type=1326 audit(1749206575.354:23962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2f550e929 code=0x7ffc0000 [ 237.742459][ T29] audit: type=1326 audit(1749206575.354:23963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f550e929 code=0x7ffc0000 [ 237.766149][ T29] audit: type=1326 audit(1749206575.354:23964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2f550e929 code=0x7ffc0000 [ 237.770060][T10763] EXT4-fs (loop6): 1 orphan inode deleted [ 237.789837][ T29] audit: type=1326 audit(1749206575.354:23965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f550e929 code=0x7ffc0000 [ 237.800587][T10763] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.834645][T10763] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.984479][T10771] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.194281][T10771] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.616216][ T5895] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:31: Failed to release dquot type 1 [ 238.666315][T10776] netlink: 'syz.1.1633': attribute type 10 has an invalid length. [ 238.674197][T10776] __nla_validate_parse: 10 callbacks suppressed [ 238.674210][T10776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1633'. [ 238.693379][T10753] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 238.706340][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.785221][T10780] syz!: rxe_newlink: already configured on team_slave_0 [ 238.800531][T10771] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.818452][ T9024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.850526][T10776] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 238.867147][T10784] netlink: 'syz.0.1636': attribute type 7 has an invalid length. [ 238.874948][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'. [ 238.894197][T10771] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.028640][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1638'. [ 239.042959][T10771] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.063330][T10771] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.075221][T10798] siw: device registration error -23 [ 239.251625][T10799] lo speed is unknown, defaulting to 1000 [ 239.478212][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1641'. [ 239.510165][T10787] netlink: 4 bytes leftover after parsing attributes in process `b'. [ 239.513797][T10771] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.530080][T10771] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.532632][T10804] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1642'. [ 239.563861][T10804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=10804 comm=syz.6.1642 [ 239.581987][T10804] netlink: 'syz.6.1642': attribute type 10 has an invalid length. [ 239.609246][ T4440] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 239.648819][T10809] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 239.659036][T10809] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 239.664306][T10810] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 239.664306][T10810] Ue[%#s' [ 239.691244][ T4440] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 239.726363][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'. [ 239.844534][ T3420] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 239.860286][T10819] loop3: detected capacity change from 0 to 1024 [ 239.876126][ T3420] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 239.878097][T10819] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.928497][T10806] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1644'. [ 239.957712][T10819] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 240.037530][T10819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.070952][T10827] loop2: detected capacity change from 0 to 512 [ 240.145358][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.159990][T10827] EXT4-fs: Ignoring removed nobh option [ 240.483960][T10814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10814 comm=syz.6.1646 [ 240.519486][T10827] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.1651: corrupted inode contents [ 240.536404][T10827] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.1651: mark_inode_dirty error [ 240.567315][T10827] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.1651: corrupted inode contents [ 240.585728][T10827] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1651: mark_inode_dirty error [ 240.606041][T10827] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1651: Failed to acquire dquot type 0 [ 240.656823][T10827] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.1651: corrupted inode contents [ 240.707721][T10827] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.1651: mark_inode_dirty error [ 240.725689][T10827] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.1651: corrupted inode contents [ 240.746182][T10827] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1651: mark_inode_dirty error [ 240.757609][T10827] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.1651: corrupted inode contents [ 240.783612][T10827] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 240.793658][T10827] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.1651: corrupted inode contents [ 240.837087][T10827] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.1651: mark_inode_dirty error [ 240.851497][T10827] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 240.870541][T10827] EXT4-fs (loop2): 1 truncate cleaned up [ 240.883764][T10827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.898728][T10827] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.912156][T10843] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 240.912156][T10843] Ue[%#s' [ 240.935843][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1651'. [ 240.940126][T10846] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 240.969088][T10847] loop3: detected capacity change from 0 to 128 [ 240.976453][T10827] openvswitch: netlink: Message has 6 unknown bytes. [ 241.041327][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.164326][ T4440] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 241.176050][ T4440] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 241.189937][T10858] loop2: detected capacity change from 0 to 1024 [ 241.201702][T10858] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.360397][T10858] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 241.376238][T10858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.482838][T10869] netlink: 'syz.1.1664': attribute type 27 has an invalid length. [ 241.535473][T10869] 0XD: left allmulticast mode [ 241.543439][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.558683][T10869] wg2: left promiscuous mode [ 241.563303][T10869] wg2: left allmulticast mode [ 241.569703][T10869] vlan0: left promiscuous mode [ 241.575706][T10869] bond2: left promiscuous mode [ 241.580487][T10869] geneve2: left promiscuous mode [ 241.585514][T10869] bond2: left allmulticast mode [ 241.664002][T10869] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.672481][T10869] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.680881][T10869] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.689357][T10869] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.732405][T10869] geneve2: left allmulticast mode [ 241.769165][T10878] loop2: detected capacity change from 0 to 8192 [ 241.798531][ T29] kauditd_printk_skb: 1304 callbacks suppressed [ 241.798558][ T29] audit: type=1400 audit(1749206836.344:25267): avc: denied { cpu } for pid=10880 comm="syz.1.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 241.837658][T10878] loop2: p1 p4 < > [ 241.841622][T10878] loop2: p1 start 4261412864 is beyond EOD, truncated [ 241.857645][ T29] audit: type=1400 audit(1749206836.404:25268): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 241.891893][T10883] loop3: detected capacity change from 0 to 512 [ 241.900097][T10883] EXT4-fs: Ignoring removed oldalloc option [ 241.907671][ T29] audit: type=1326 audit(1749206836.434:25269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10882 comm="syz.3.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 241.931372][ T29] audit: type=1326 audit(1749206836.434:25270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10882 comm="syz.3.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 241.955064][ T29] audit: type=1326 audit(1749206836.434:25271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10882 comm="syz.3.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 241.978663][ T29] audit: type=1326 audit(1749206836.434:25272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10882 comm="syz.3.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 242.002233][ T29] audit: type=1326 audit(1749206836.434:25273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10882 comm="syz.3.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 242.025893][ T29] audit: type=1326 audit(1749206836.434:25274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10882 comm="syz.3.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 242.049509][ T29] audit: type=1326 audit(1749206836.434:25275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10882 comm="syz.3.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 242.073035][ T29] audit: type=1326 audit(1749206836.434:25276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10882 comm="syz.3.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 242.147276][T10883] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1668: Parent and EA inode have the same ino 15 [ 242.167235][T10888] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 242.167235][T10888] Ue[%#s' [ 242.191910][T10883] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1668: Parent and EA inode have the same ino 15 [ 242.220620][T10883] EXT4-fs (loop3): 1 orphan inode deleted [ 242.241658][T10883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.266901][T10878] serio: Serial port ptm0 [ 242.314187][T10896] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 242.314187][T10896] Ue[%#s' [ 242.670632][T10906] loop1: detected capacity change from 0 to 2048 [ 242.846596][T10906] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.892768][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.914788][T10906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.941565][T10906] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 243.032084][T10926] loop3: detected capacity change from 0 to 512 [ 243.049376][T10928] loop6: detected capacity change from 0 to 1024 [ 243.061414][T10921] loop2: detected capacity change from 0 to 512 [ 243.088216][T10928] journal_path: Non-blockdev passed as './file1' [ 243.094609][T10928] EXT4-fs: error: could not find journal device path [ 243.122567][T10921] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 243.131958][T10926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.147723][T10926] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.158825][T10921] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #13: comm syz.2.1675: iget: bad i_size value: 12154757448730 [ 243.192498][T10926] netlink: 'syz.3.1677': attribute type 21 has an invalid length. [ 243.218271][T10921] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1675: couldn't read orphan inode 13 (err -117) [ 243.242995][T10921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.266169][T10926] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 243.275477][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.311527][T10914] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 243.742986][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.794992][T10945] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 243.794992][T10945] Ue[%#s' [ 243.804756][T10947] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 243.804756][T10947] Ue[%#s' [ 243.846704][T10948] __nla_validate_parse: 16 callbacks suppressed [ 243.846718][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1682'. [ 243.930157][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.030730][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1681'. [ 244.118583][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1685'. [ 244.243061][T10965] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 244.243061][T10965] Ue[%#s' [ 244.424536][T10971] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 244.445901][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1690'. [ 244.640271][T10980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'. [ 244.656248][T10979] loop2: detected capacity change from 0 to 2048 [ 244.656643][T10979] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.663349][T10974] loop3: detected capacity change from 0 to 8192 [ 244.675287][T10979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.755752][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1693'. [ 244.888532][T10971] syz.3.1692 (10971): attempted to duplicate a private mapping with mremap. This is not supported. [ 244.908621][T10994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1695'. [ 244.989123][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.083930][T11000] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 245.083930][T11000] Ue[%#s' [ 245.294267][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1698'. [ 245.339199][T11009] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 245.339199][T11009] Ue[%#s' [ 245.343512][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1699'. [ 245.479854][T11014] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 245.479854][T11014] Ue[%#s' [ 245.587128][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1701'. [ 245.621406][T11019] futex_wake_op: syz.1.1704 tries to shift op by -1; fix this program [ 245.679851][T11021] loop2: detected capacity change from 0 to 8192 [ 245.730262][T11033] __vm_enough_memory: pid: 11033, comm: syz.0.1710, bytes: 21200054861824 not enough memory for the allocation [ 245.760524][T11034] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 245.830258][T11038] macsec0: entered allmulticast mode [ 245.843291][T11038] dummy0: entered allmulticast mode [ 245.914217][T11041] loop1: detected capacity change from 0 to 512 [ 245.922884][T11041] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 245.940018][T11041] EXT4-fs (loop1): failed to initialize system zone (-117) [ 245.949824][T11045] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 245.949824][T11045] Ue[%#s' [ 245.951342][T11041] EXT4-fs (loop1): mount failed [ 246.059598][T11050] loop6: detected capacity change from 0 to 1024 [ 246.066541][T11050] journal_path: Non-blockdev passed as './file1' [ 246.073009][T11050] EXT4-fs: error: could not find journal device path [ 246.283649][T11056] netlink: 'syz.0.1719': attribute type 27 has an invalid length. [ 246.325001][T11056] batman_adv: batadv0: Interface deactivated: dummy0 [ 246.335759][T11056] wg1: left promiscuous mode [ 246.340387][T11056] wg1: left allmulticast mode [ 246.347538][T11056] vlan2: left allmulticast mode [ 246.352442][T11056] veth1: left allmulticast mode [ 246.357532][T11056] vti0: left allmulticast mode [ 246.520417][T11063] siw: device registration error -23 [ 246.603892][T11068] netlink: 'syz.0.1723': attribute type 4 has an invalid length. [ 246.613747][T11068] netlink: 'syz.0.1723': attribute type 4 has an invalid length. [ 246.768240][T11077] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 246.768240][T11077] Ue[%#s' [ 246.870252][ T29] kauditd_printk_skb: 1048 callbacks suppressed [ 246.870268][ T29] audit: type=1326 audit(1749206841.414:26325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 247.124232][T11086] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 247.124232][T11086] Ue[%#s' [ 247.149763][ T29] audit: type=1326 audit(1749206841.464:26326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 247.173412][ T29] audit: type=1326 audit(1749206841.484:26327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 247.197002][ T29] audit: type=1326 audit(1749206841.484:26328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 247.220657][ T29] audit: type=1326 audit(1749206841.484:26329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 247.244252][ T29] audit: type=1326 audit(1749206841.484:26330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 247.267852][ T29] audit: type=1326 audit(1749206841.484:26331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 247.291451][ T29] audit: type=1326 audit(1749206841.484:26332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 247.315028][ T29] audit: type=1326 audit(1749206841.484:26333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 247.338607][ T29] audit: type=1326 audit(1749206841.484:26334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276e29e929 code=0x7ffc0000 [ 247.363160][T11082] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 247.363160][T11082] Ue[%#s' [ 247.459217][T11097] nfs4: Bad value for 'source' [ 247.466466][T11097] loop3: detected capacity change from 0 to 512 [ 247.594764][T11097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 247.639881][T11097] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.650469][T11102] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 247.854873][T11104] lo speed is unknown, defaulting to 1000 [ 248.197501][T11109] siw: device registration error -23 [ 248.204145][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 248.431198][T11128] loop1: detected capacity change from 0 to 8192 [ 248.460145][T11139] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 248.460145][T11139] Ue[%#s' [ 248.496761][T11128] loop1: p1 p4 < > [ 248.500698][T11128] loop1: p1 start 4261412864 is beyond EOD, truncated [ 248.531624][T11145] netlink: 'syz.2.1745': attribute type 27 has an invalid length. [ 248.537733][T11128] serio: Serial port ptm0 [ 248.545228][T11145] ip6tnl1: left promiscuous mode [ 248.551755][T11145] dummy0: left allmulticast mode [ 248.558525][T11145] macsec0: left allmulticast mode [ 248.564319][ T3385] lo speed is unknown, defaulting to 1000 [ 248.570198][ T3385] sz0: Port: 1 Link DOWN [ 248.652270][T11154] netlink: 'syz.2.1746': attribute type 4 has an invalid length. [ 248.683665][T11157] SELinux: syz.2.1748 (11157) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 248.701039][T11158] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 248.701039][T11158] Ue[%#s' [ 248.728738][T11157] wireguard0: entered promiscuous mode [ 248.734282][T11157] wireguard0: entered allmulticast mode [ 248.818200][T11161] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 248.818200][T11161] Ue[%#s' [ 248.894901][T11163] __nla_validate_parse: 35 callbacks suppressed [ 248.894915][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1750'. [ 248.917400][T11165] loop1: detected capacity change from 0 to 1024 [ 248.924364][T11165] journal_path: Non-blockdev passed as './file1' [ 248.930759][T11165] EXT4-fs: error: could not find journal device path [ 249.080578][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1753'. [ 249.120296][T11175] loop2: detected capacity change from 0 to 512 [ 249.151273][T11175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.170096][T11175] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.181953][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1756'. [ 249.191338][T11180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1756'. [ 249.235089][T11175] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.257071][T11184] netlink: 'syz.0.1757': attribute type 27 has an invalid length. [ 249.270944][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 249.279906][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 249.299277][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 249.330900][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 249.339821][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 249.366097][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 249.948996][T11200] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.957267][T11200] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.965477][T11200] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.973678][T11200] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.986309][T11200] vxlan0: entered promiscuous mode [ 250.139224][T11203] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 250.139224][T11203] Ue[%#s' [ 250.201139][T11205] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 250.201139][T11205] Ue[%#s' [ 250.347180][T11216] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 250.347180][T11216] Ue[%#s' [ 250.477648][T11222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11222 comm=syz.3.1767 [ 250.583705][T11226] openvswitch: netlink: Message has 6 unknown bytes. [ 250.700654][ T3420] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 250.875959][ T3420] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 251.074220][T11218] syz.3.1767 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 251.085298][T11218] CPU: 1 UID: 0 PID: 11218 Comm: syz.3.1767 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 251.085325][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.085339][T11218] Call Trace: [ 251.085346][T11218] [ 251.085354][T11218] __dump_stack+0x1d/0x30 [ 251.085414][T11218] dump_stack_lvl+0xe8/0x140 [ 251.085483][T11218] dump_stack+0x15/0x1b [ 251.085497][T11218] dump_header+0x81/0x220 [ 251.085528][T11218] oom_kill_process+0x334/0x3f0 [ 251.085564][T11218] out_of_memory+0x979/0xb80 [ 251.085603][T11218] try_charge_memcg+0x5e6/0x9e0 [ 251.085638][T11218] charge_memcg+0x51/0xc0 [ 251.085653][T11218] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 251.085672][T11218] __read_swap_cache_async+0x1df/0x350 [ 251.085787][T11218] swap_cluster_readahead+0x277/0x3e0 [ 251.085898][T11218] swapin_readahead+0xde/0x6f0 [ 251.085931][T11218] ? __filemap_get_folio+0x49f/0x650 [ 251.086070][T11218] ? swap_cache_get_folio+0x77/0x200 [ 251.086112][T11218] do_swap_page+0x301/0x2430 [ 251.086133][T11218] ? css_rstat_updated+0xcd/0x5b0 [ 251.086233][T11218] ? __pfx_default_wake_function+0x10/0x10 [ 251.086324][T11218] handle_mm_fault+0x9a5/0x2be0 [ 251.086345][T11218] ? mas_walk+0xf2/0x120 [ 251.086373][T11218] do_user_addr_fault+0x636/0x1090 [ 251.086425][T11218] ? fpregs_restore_userregs+0xe2/0x1d0 [ 251.086473][T11218] ? switch_fpu_return+0xe/0x20 [ 251.086498][T11218] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 251.086526][T11218] exc_page_fault+0x62/0xa0 [ 251.086598][T11218] asm_exc_page_fault+0x26/0x30 [ 251.086620][T11218] RIP: 0033:0x7f276e17538c [ 251.086712][T11218] Code: 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 251.086731][T11218] RSP: 002b:00007fff2e5d6e00 EFLAGS: 00010202 [ 251.086744][T11218] RAX: 0000000000000000 RBX: 00007f276e4c5fa0 RCX: 0000000000000000 [ 251.086754][T11218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558cb60808 [ 251.086765][T11218] RBP: 00007f276e4c7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 251.086778][T11218] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000003d9d7 [ 251.086791][T11218] R13: 00007f276e4c6080 R14: ffffffffffffffff R15: 00007fff2e5d6f10 [ 251.086814][T11218] [ 251.285910][ T3385] usb usb8-port1: attempt power cycle [ 251.292546][T11218] memory: usage 307200kB, limit 307200kB, failcnt 150 [ 251.323694][T11218] memory+swap: usage 307596kB, limit 9007199254740988kB, failcnt 0 [ 251.331636][T11218] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 251.338992][T11218] Memory cgroup stats for /syz3: [ 251.339194][T11218] cache 16384 [ 251.347469][T11218] rss 0 [ 251.350295][T11218] shmem 16384 [ 251.353578][T11218] mapped_file 823296 [ 251.357549][T11218] dirty 0 [ 251.360482][T11218] writeback 8192 [ 251.364028][T11218] workingset_refault_anon 13 [ 251.368621][T11218] workingset_refault_file 46 [ 251.373198][T11218] swap 405504 [ 251.376521][T11218] swapcached 8192 [ 251.380153][T11218] nr_memmap_boot_pages 341466 [ 251.384812][T11218] pgpgin 341458 [ 251.388285][T11218] pglazyfree 283995 [ 251.392087][T11218] pgfault 28 [ 251.395281][T11218] a_other 8192 [ 251.398705][T11218] inactive_anon 0 [ 251.402331][T11218] active_anon 8192 [ 251.406052][T11218] inactive_file 0 [ 251.409673][T11218] active_file 16384 [ 251.413552][T11218] hierarchical_memory_limit 314572800 [ 251.418954][T11218] hierarchical_memsw_limit 9223372036854771712 [ 251.425146][T11218] total_cache 16384 [ 251.428983][T11218] total_rss 0 [ 251.432269][T11218] total_shmem 16384 [ 251.436140][T11218] total_mapped_file 823296 [ 251.440606][T11218] total_dirty 0 [ 251.444061][T11218] total_writeback 8192 [ 251.448134][T11218] total_workingset_refault_anon 13 [ 251.453309][T11218] total_workingset_refault_file 46 [ 251.458441][T11218] total_swap 405504 [ 251.462239][T11218] total_swapcached 8192 [ 251.466535][T11218] total_nr_memmap_boot_pages 341466 [ 251.471785][T11218] total_pgpgin 341458 [ 251.475769][T11218] total_pglazyfree 283995 [ 251.480095][T11218] total_pgfault 28 [ 251.483800][T11218] total_a_other 8192 [ 251.487767][T11218] total_inactive_anon 0 [ 251.491974][T11218] total_active_anon 8192 [ 251.496218][T11218] total_inactive_file 0 [ 251.500358][T11218] total_active_file 16384 [ 251.504695][T11218] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1767,pid=11218,uid=0 [ 251.519434][T11218] Memory cgroup out of memory: Killed process 11218 (syz.3.1767) total-vm:96604kB, anon-rss:936kB, file-rss:23204kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 251.750900][T11245] vti0: entered allmulticast mode [ 251.759508][T11247] loop1: detected capacity change from 0 to 512 [ 251.766484][T11247] EXT4-fs: Ignoring removed nobh option [ 251.777171][T11247] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.1777: corrupted inode contents [ 251.789366][T11247] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.1777: mark_inode_dirty error [ 251.801053][T11247] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.1777: corrupted inode contents [ 251.812981][T11247] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1777: mark_inode_dirty error [ 251.824518][T11247] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1777: Failed to acquire dquot type 0 [ 251.836861][T11247] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1777: corrupted inode contents [ 251.848893][T11247] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.1777: mark_inode_dirty error [ 251.860593][T11247] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1777: corrupted inode contents [ 251.872796][T11247] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1777: mark_inode_dirty error [ 251.884389][T11247] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1777: corrupted inode contents [ 251.896747][T11247] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 251.905410][T11247] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1777: corrupted inode contents [ 251.917694][T11247] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.1777: mark_inode_dirty error [ 251.929252][ T29] kauditd_printk_skb: 5028 callbacks suppressed [ 251.929267][ T29] audit: type=1326 audit(1749206846.464:31358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b58a1e929 code=0x7ffc0000 [ 251.959141][ T29] audit: type=1326 audit(1749206846.464:31359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b58a1e929 code=0x7ffc0000 [ 251.973469][T11250] netlink: 'syz.3.1775': attribute type 21 has an invalid length. [ 251.982845][ T29] audit: type=1326 audit(1749206846.464:31360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9b58a1e929 code=0x7ffc0000 [ 251.992758][T11247] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 252.014180][ T29] audit: type=1326 audit(1749206846.464:31361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b58a1e929 code=0x7ffc0000 [ 252.025013][T11247] EXT4-fs (loop1): 1 truncate cleaned up [ 252.046631][ T29] audit: type=1326 audit(1749206846.464:31362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9b58a1e929 code=0x7ffc0000 [ 252.052647][T11247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.088435][T11251] loop3: detected capacity change from 0 to 512 [ 252.088578][T11247] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.094977][ T29] audit: type=1326 audit(1749206846.634:31363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b58a1e929 code=0x7ffc0000 [ 252.112592][T11247] openvswitch: netlink: Message has 6 unknown bytes. [ 252.128760][ T29] audit: type=1326 audit(1749206846.634:31364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11252 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b58a1e929 code=0x7ffc0000 [ 252.181692][T11251] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 252.194688][T11257] netlink: 'syz.0.1780': attribute type 4 has an invalid length. [ 252.195390][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.205011][T11257] netlink: 'syz.0.1780': attribute type 4 has an invalid length. [ 252.222093][T11251] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.1775: bad orphan inode 15 [ 252.237902][T11251] ext4_test_bit(bit=14, block=18) = 1 [ 252.243310][T11251] is_bad_inode(inode)=0 [ 252.247617][T11251] NEXT_ORPHAN(inode)=1023 [ 252.251980][T11251] max_ino=32 [ 252.255179][T11251] i_nlink=0 [ 252.258739][ T29] audit: type=1400 audit(1749206846.744:31365): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 252.270503][T11260] loop1: detected capacity change from 0 to 512 [ 252.288251][T11260] EXT4-fs: Ignoring removed nobh option [ 252.295933][T11251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 252.327167][T11251] ext2 filesystem being mounted at /328/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 252.348553][T11260] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.1781: corrupted inode contents [ 252.367076][T11260] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.1781: mark_inode_dirty error [ 252.386299][T11260] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.1781: corrupted inode contents [ 252.405925][T11260] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1781: mark_inode_dirty error [ 252.426493][T11260] Quota error (device loop1): write_blk: dquota write failed [ 252.435311][T11260] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 252.446950][T11260] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1781: Failed to acquire dquot type 0 [ 252.459100][T11260] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1781: corrupted inode contents [ 252.477325][T11260] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.1781: mark_inode_dirty error [ 252.491932][T11260] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1781: corrupted inode contents [ 252.504048][T11260] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1781: mark_inode_dirty error [ 252.524593][T11260] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1781: corrupted inode contents [ 252.546936][T11260] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 252.557450][T11260] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1781: corrupted inode contents [ 252.569559][T11260] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.1781: mark_inode_dirty error [ 252.581623][T11260] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 252.596034][T11270] netlink: 'syz.6.1779': attribute type 4 has an invalid length. [ 252.596129][T11260] EXT4-fs (loop1): 1 truncate cleaned up [ 252.634260][T11260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.648952][T11260] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.661855][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 252.684049][T11260] openvswitch: netlink: Message has 6 unknown bytes. [ 252.703581][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.964270][T11281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11281 comm=syz.1.1786 [ 252.990622][T11286] loop3: detected capacity change from 0 to 512 [ 253.079976][T11286] EXT4-fs (loop3): 1 orphan inode deleted [ 253.103663][T11286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.148920][T11286] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.164691][ T5873] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 253.182818][T11277] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 253.229851][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.303877][T11290] loop3: detected capacity change from 0 to 512 [ 253.312016][T11290] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 253.326866][T11290] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 253.335101][T11290] System zones: 0-2, 18-18, 34-34 [ 253.342648][T11290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.355389][T11290] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.366369][ T3385] usb usb8-port1: unable to enumerate USB device [ 253.549615][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.745970][T11305] loop6: detected capacity change from 0 to 2048 [ 253.870397][T11305] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.990269][T11305] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 254.005260][T11305] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 626 with error 28 [ 254.017775][T11305] EXT4-fs (loop6): This should not happen!! Data will be lost [ 254.017775][T11305] [ 254.027496][T11305] EXT4-fs (loop6): Total free blocks count 0 [ 254.033556][T11305] EXT4-fs (loop6): Free/Dirty block details [ 254.039513][T11305] EXT4-fs (loop6): free_blocks=2415919104 [ 254.045301][T11305] EXT4-fs (loop6): dirty_blocks=640 [ 254.050564][T11305] EXT4-fs (loop6): Block reservation details [ 254.056600][T11305] EXT4-fs (loop6): i_reserved_data_blocks=40 [ 254.156367][ T5873] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 254.203069][T11317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.241985][T11317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.254894][T11317] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32 sclass=netlink_audit_socket pid=11317 comm=syz.3.1797 [ 254.292711][T11322] netlink: 'syz.0.1795': attribute type 4 has an invalid length. [ 254.368799][T11327] __nla_validate_parse: 22 callbacks suppressed [ 254.368812][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 254.373248][T11325] netlink: 'syz.6.1796': attribute type 27 has an invalid length. [ 254.408841][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1796'. [ 254.417771][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1796'. [ 254.428302][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1796'. [ 254.461938][T11334] netlink: 'syz.0.1800': attribute type 21 has an invalid length. [ 254.462272][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1796'. [ 254.478869][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1796'. [ 254.490923][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1796'. [ 254.510751][T11337] loop2: detected capacity change from 0 to 512 [ 254.528952][T11337] EXT4-fs (loop2): 1 orphan inode deleted [ 254.536697][T11337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.539105][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1796'. [ 254.558133][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1796'. [ 254.568160][ T5873] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 254.569649][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1796'. [ 254.580576][T11337] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.618869][T11329] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 254.650353][T11342] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 254.650353][T11342] Ue[%#s' [ 254.685790][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.709206][T11344] netlink: 'syz.2.1802': attribute type 27 has an invalid length. [ 254.760617][T11348] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 254.760617][T11348] Ue[%#s' [ 254.860171][T11355] netlink: 'syz.6.1807': attribute type 10 has an invalid length. [ 254.868584][T11355] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 254.899442][T11355] loop6: detected capacity change from 0 to 736 [ 254.906439][T11355] iso9660: Unknown parameter 'kvm_dirty_ring_exit' [ 254.939692][T11355] netlink: 'syz.6.1807': attribute type 27 has an invalid length. [ 255.111906][T11370] loop6: detected capacity change from 0 to 164 [ 255.164986][T11370] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 255.184635][T11370] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 255.193305][T11370] rock: directory entry would overflow storage [ 255.199750][T11370] rock: sig=0x4f50, size=4, remaining=3 [ 255.205380][T11370] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 255.375742][T11374] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 255.455287][T11374] rock: directory entry would overflow storage [ 255.461539][T11374] rock: sig=0x4f50, size=4, remaining=3 [ 255.467183][T11374] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 255.709781][T11382] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 255.709781][T11382] Ue[%#s' [ 255.836451][T11389] atomic_op ffff888124c76d28 conn xmit_atomic 0000000000000000 [ 255.964959][T11391] lo speed is unknown, defaulting to 1000 [ 256.228718][T11410] loop6: detected capacity change from 0 to 512 [ 256.239155][T11410] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 256.316998][T11415] loop3: detected capacity change from 0 to 1024 [ 256.325604][T11410] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 256.336050][T11415] journal_path: Non-blockdev passed as './file1' [ 256.342424][T11415] EXT4-fs: error: could not find journal device path [ 256.355744][T11410] System zones: 0-2, 18-18, 34-34 [ 256.877628][T11410] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.897692][T11410] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.940171][ T29] kauditd_printk_skb: 859 callbacks suppressed [ 256.940185][ T29] audit: type=1400 audit(1749206851.484:32223): avc: denied { open } for pid=11427 comm="syz.0.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 256.966101][ T29] audit: type=1400 audit(1749206851.484:32224): avc: denied { kernel } for pid=11427 comm="syz.0.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 256.994085][ T9024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.025747][ T29] audit: type=1400 audit(1749206851.524:32225): avc: denied { bind } for pid=11429 comm="syz.2.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 257.046336][ T29] audit: type=1400 audit(1749206851.524:32226): avc: denied { setopt } for pid=11429 comm="syz.2.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 257.067225][ T29] audit: type=1400 audit(1749206851.534:32227): avc: denied { write } for pid=11429 comm="syz.2.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 257.088269][ T29] audit: type=1400 audit(1749206851.534:32228): avc: denied { read write } for pid=11429 comm="syz.2.1827" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 257.112171][ T29] audit: type=1400 audit(1749206851.534:32229): avc: denied { open } for pid=11429 comm="syz.2.1827" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 257.136083][ T29] audit: type=1400 audit(1749206851.534:32230): avc: denied { unmount } for pid=9024 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 257.162367][ T29] audit: type=1326 audit(1749206851.594:32231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11433 comm="syz.2.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34d4fe929 code=0x7ffc0000 [ 257.162417][ T29] audit: type=1326 audit(1749206851.594:32232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11433 comm="syz.2.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34d4fe929 code=0x7ffc0000 [ 257.255293][T11439] loop1: detected capacity change from 0 to 1024 [ 257.302652][T11447] nfs4: Bad value for 'source' [ 257.313591][T11447] loop6: detected capacity change from 0 to 512 [ 257.337810][T11439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.381079][T11447] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 257.405106][T11447] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.040515][T11458] lo speed is unknown, defaulting to 1000 [ 258.047015][T11459] lo speed is unknown, defaulting to 1000 [ 258.157199][ T9024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 258.357966][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.376819][T11476] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 258.440376][T11481] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 258.440376][T11481] Ue[%#s' [ 258.468462][T11474] xt_CT: You must specify a L4 protocol and not use inversions on it [ 258.492197][ T3428] Process accounting resumed [ 258.545983][T11478] pim6reg: entered allmulticast mode [ 258.554344][T11478] pim6reg: left allmulticast mode [ 258.680574][T11496] loop1: detected capacity change from 0 to 512 [ 258.695791][T11496] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.697099][T11496] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 258.732974][T11496] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 258.780938][T11496] EXT4-fs (loop1): 1 truncate cleaned up [ 258.793049][T11496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.840461][T11500] loop6: detected capacity change from 0 to 512 [ 258.852782][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.858854][T11500] EXT4-fs (loop6): 1 orphan inode deleted [ 258.878198][ T5917] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:50: Failed to release dquot type 1 [ 258.878563][T11500] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.903895][T11500] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.923065][T11500] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 258.944333][T11517] loop1: detected capacity change from 0 to 512 [ 258.959600][T11517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.959720][T11517] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.994943][T11517] netlink: 'syz.1.1853': attribute type 21 has an invalid length. [ 259.007842][T11517] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 259.112367][T11521] xt_policy: too many policy elements [ 259.383560][T11527] __nla_validate_parse: 28 callbacks suppressed [ 259.383651][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1857'. [ 259.506292][ T9024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.641718][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1860'. [ 259.848190][T11537] lo speed is unknown, defaulting to 1000 [ 260.098078][T11547] macvlan2: entered promiscuous mode [ 260.103405][T11547] bridge0: entered promiscuous mode [ 260.124085][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1863'. [ 260.133920][T11543] loop3: detected capacity change from 0 to 8192 [ 260.140462][T11547] bridge0: port 2(macvlan2) entered blocking state [ 260.147064][T11547] bridge0: port 2(macvlan2) entered disabled state [ 260.161913][T11547] macvlan2: entered allmulticast mode [ 260.167361][T11547] bridge0: entered allmulticast mode [ 260.173201][T11543] loop3: p1 p4 < > [ 260.177240][T11543] loop3: p1 start 4261412864 is beyond EOD, truncated [ 260.184131][T11547] macvlan2: left allmulticast mode [ 260.189327][T11547] bridge0: left allmulticast mode [ 260.204419][T11547] bridge0: left promiscuous mode [ 260.212682][T11549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1863'. [ 260.228475][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.259905][T11555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.281324][T11555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.356561][T11562] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 260.356561][T11562] Ue[%#s' [ 260.411457][T11555] loop1: detected capacity change from 0 to 8192 [ 260.470065][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1866'. [ 260.488875][T11555] loop1: p2 p3 p4 [ 260.495120][T11555] loop1: p2 start 452985600 is beyond EOD, truncated [ 260.501896][T11555] loop1: p3 size 33554432 extends beyond EOD, truncated [ 260.509982][T11555] loop1: p4 start 8388607 is beyond EOD, truncated [ 260.568066][T11569] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 260.568066][T11569] Ue[%#s' [ 260.615056][T11567] atomic_op ffff88812971f928 conn xmit_atomic 0000000000000000 [ 260.624318][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 260.643557][T11571] wireguard0: entered promiscuous mode [ 260.649280][T11571] wireguard0: entered allmulticast mode [ 260.728534][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1872'. [ 260.788047][T11577] tipc: Enabling of bearer rejected, failed to enable media [ 260.860579][T11584] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 260.934566][T11587] netlink: 'syz.2.1877': attribute type 21 has an invalid length. [ 261.117560][T11588] lo speed is unknown, defaulting to 1000 [ 261.292359][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1874'. [ 261.479893][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1879'. [ 261.491966][T11594] loop3: detected capacity change from 0 to 512 [ 261.498536][T11594] EXT4-fs: Ignoring removed nobh option [ 261.518288][T11594] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.1879: corrupted inode contents [ 261.532871][T11594] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.1879: mark_inode_dirty error [ 261.545441][T11594] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.1879: corrupted inode contents [ 261.558500][T11594] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1879: mark_inode_dirty error [ 261.569923][T11594] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1879: Failed to acquire dquot type 0 [ 261.582764][T11594] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.1879: corrupted inode contents [ 261.594816][T11594] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.1879: mark_inode_dirty error [ 261.607739][T11594] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.1879: corrupted inode contents [ 261.619875][T11594] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1879: mark_inode_dirty error [ 261.632353][T11594] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.1879: corrupted inode contents [ 261.645314][T11594] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 261.655275][T11594] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.1879: corrupted inode contents [ 261.675593][T11594] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.1879: mark_inode_dirty error [ 261.688088][T11594] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 261.754050][T11594] EXT4-fs (loop3): 1 truncate cleaned up [ 261.760712][T11594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.773895][T11594] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.808445][T11594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1879'. [ 261.822731][T11594] openvswitch: netlink: Message has 6 unknown bytes. [ 261.855450][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.863009][T11603] ip6tnl1: entered promiscuous mode [ 261.869807][T11603] ip6tnl1: entered allmulticast mode [ 261.912163][T11607] loop3: detected capacity change from 0 to 2048 [ 261.928448][T11607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.945731][ T29] kauditd_printk_skb: 1238 callbacks suppressed [ 261.945745][ T29] audit: type=1326 audit(1749206856.494:33468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11608 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb34d4fe929 code=0x7ffc0000 [ 261.975742][ T29] audit: type=1326 audit(1749206856.494:33469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11608 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34d4fe929 code=0x7ffc0000 [ 261.975840][T11612] loop6: detected capacity change from 0 to 2048 [ 262.005901][T11607] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.041774][ T29] audit: type=1326 audit(1749206856.494:33470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11608 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb34d4fe929 code=0x7ffc0000 [ 262.065489][ T29] audit: type=1326 audit(1749206856.494:33471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11608 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34d4fe929 code=0x7ffc0000 [ 262.071002][T11607] futex_wake_op: syz.3.1882 tries to shift op by -1; fix this program [ 262.089127][ T29] audit: type=1326 audit(1749206856.494:33472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11608 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34d4fe929 code=0x7ffc0000 [ 262.120979][ T29] audit: type=1326 audit(1749206856.494:33473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11600 comm="syz.0.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f9b58a1e929 code=0x7ffc0000 [ 262.144579][ T29] audit: type=1326 audit(1749206856.494:33474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11600 comm="syz.0.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b58a1e929 code=0x7ffc0000 [ 262.168230][ T29] audit: type=1326 audit(1749206856.494:33475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11600 comm="syz.0.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b58a1e929 code=0x7ffc0000 [ 262.191897][ T29] audit: type=1326 audit(1749206856.554:33476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11608 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb34d4fe929 code=0x7ffc0000 [ 262.215656][ T29] audit: type=1326 audit(1749206856.564:33477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11600 comm="syz.0.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f9b58a1e929 code=0x7ffc0000 [ 262.449002][T11622] pim6reg: entered allmulticast mode [ 262.590981][T11625] lo speed is unknown, defaulting to 1000 [ 262.772642][T11627] pim6reg: left allmulticast mode [ 262.939203][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.953567][T11637] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 262.953567][T11637] Ue[%#s' [ 262.979860][T11636] loop6: detected capacity change from 0 to 8192 [ 262.994882][T11639] openvswitch: netlink: Message has 6 unknown bytes. [ 263.012145][T11641] netlink: 'syz.3.1891': attribute type 10 has an invalid length. [ 263.021036][T11641] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 263.038932][T11636] loop6: p1 p4 < > [ 263.042820][T11636] loop6: p1 start 4261412864 is beyond EOD, truncated [ 263.054357][T11641] loop3: detected capacity change from 0 to 736 [ 263.070782][T11641] iso9660: Unknown parameter 'kvm_dirty_ring_exit' [ 263.099740][T11648] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.099767][T11641] netlink: 'syz.3.1891': attribute type 27 has an invalid length. [ 263.119989][T11648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.125484][T11641] vti0: left allmulticast mode [ 263.148819][T11648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.244274][T11656] loop6: detected capacity change from 0 to 512 [ 263.254287][T11656] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 263.370232][T11656] EXT4-fs (loop6): failed to initialize system zone (-117) [ 263.378693][T11656] EXT4-fs (loop6): mount failed [ 263.997856][T11669] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 264.127237][T11669] loop1: detected capacity change from 0 to 8192 [ 264.162104][T11674] loop6: detected capacity change from 0 to 1024 [ 264.186074][T11674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.230682][T11674] vlan2: entered promiscuous mode [ 264.235987][T11674] hsr_slave_1: entered promiscuous mode [ 264.241875][T11674] vlan2: entered allmulticast mode [ 264.247138][T11674] hsr_slave_1: entered allmulticast mode [ 264.265451][T11675] atomic_op ffff888124c76528 conn xmit_atomic 0000000000000000 [ 264.303157][T11680] openvswitch: netlink: Message has 6 unknown bytes. [ 264.305286][T11684] loop1: detected capacity change from 0 to 1024 [ 264.318767][T11684] journal_path: Non-blockdev passed as './file1' [ 264.325126][T11684] EXT4-fs: error: could not find journal device path [ 264.372668][T11688] EXT4-fs error (device loop6): __ext4_new_inode:1073: comm syz.6.1901: reserved inode found cleared - inode=1 [ 264.420157][T11687] loop1: detected capacity change from 0 to 8192 [ 264.438745][ T9024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.466000][T11695] siw: device registration error -23 [ 264.475844][T11687] loop1: p1 p4 < > [ 264.481673][T11687] loop1: p1 start 4261412864 is beyond EOD, truncated [ 264.506876][T11700] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 264.506876][T11700] Ue[%#s' [ 264.588410][T11700] __nla_validate_parse: 14 callbacks suppressed [ 264.588425][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1911'. [ 264.742587][T11721] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 264.742587][T11721] Ue[%#s' [ 264.817915][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1924'. [ 264.858715][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1917'. [ 264.870529][T11727] loop1: detected capacity change from 0 to 512 [ 264.870745][T11727] EXT4-fs: Ignoring removed nobh option [ 265.071056][T11727] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.1917: corrupted inode contents [ 265.071323][T11727] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.1917: mark_inode_dirty error [ 265.132152][T11727] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.1917: corrupted inode contents [ 265.134039][T11727] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1917: mark_inode_dirty error [ 265.158936][T11727] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1917: Failed to acquire dquot type 0 [ 265.161274][T11727] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1917: corrupted inode contents [ 265.161660][T11727] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.1917: mark_inode_dirty error [ 265.163087][T11727] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1917: corrupted inode contents [ 265.163260][T11727] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1917: mark_inode_dirty error [ 265.164012][T11727] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1917: corrupted inode contents [ 265.164183][T11727] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 265.164382][T11727] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1917: corrupted inode contents [ 265.164569][T11727] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.1917: mark_inode_dirty error [ 265.164777][T11727] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 265.165261][T11727] EXT4-fs (loop1): 1 truncate cleaned up [ 265.165709][T11727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.165782][T11727] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.171633][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1917'. [ 265.264670][T11731] openvswitch: netlink: Message has 6 unknown bytes. [ 265.362746][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.461858][T11733] loop1: detected capacity change from 0 to 1024 [ 265.469033][T11733] journal_path: Non-blockdev passed as './file1' [ 265.469055][T11733] EXT4-fs: error: could not find journal device path [ 265.494758][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1919'. [ 265.699455][T11748] loop3: detected capacity change from 0 to 8192 [ 265.726415][T11748] loop3: p1 p4 < > [ 265.730437][T11748] loop3: p1 start 4261412864 is beyond EOD, truncated [ 265.836146][T11757] loop6: detected capacity change from 0 to 2048 [ 265.866112][T11757] loop6: p1 < > p4 [ 265.870545][T11757] loop6: p4 size 8388608 extends beyond EOD, truncated [ 265.929267][T11763] loop3: detected capacity change from 0 to 1024 [ 265.942304][T11763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.106563][T11773] loop6: detected capacity change from 0 to 1024 [ 266.129348][T11773] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.159537][T11773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.173431][T11773] netlink: 'syz.6.1928': attribute type 39 has an invalid length. [ 266.245182][ T9024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.424432][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'. [ 266.548357][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 266.566954][T11793] ip6tnl1: entered promiscuous mode [ 266.572263][T11793] ip6tnl1: entered allmulticast mode [ 266.578088][T11793] team0: Device ip6tnl1 is of different type [ 266.601320][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1939'. [ 266.629827][T11789] lo speed is unknown, defaulting to 1000 [ 266.673961][T11793] loop1: detected capacity change from 0 to 2048 [ 266.683476][T11795] openvswitch: netlink: Message has 6 unknown bytes. [ 266.707209][T11799] blktrace: Concurrent blktraces are not allowed on loop1 [ 266.767810][T11803] netlink: 'syz.6.1942': attribute type 4 has an invalid length. [ 266.778857][T11803] loop6: detected capacity change from 0 to 128 [ 266.788177][T11803] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 266.883423][T11808] futex_wake_op: syz.1.1944 tries to shift op by -1; fix this program [ 267.007725][ T29] kauditd_printk_skb: 1259 callbacks suppressed [ 267.007739][ T29] audit: type=1400 audit(1749206861.554:34735): avc: denied { ioctl } for pid=11800 comm="syz.2.1941" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.014805][T11803] FAT-fs (loop6): FAT read failed (blocknr 128) [ 267.040933][T11801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.066574][ T29] audit: type=1400 audit(1749206861.604:34736): avc: denied { write } for pid=11811 comm="syz.0.1945" lport=51651 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 267.102222][T11801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.221569][T11815] lo speed is unknown, defaulting to 1000 [ 267.521945][ T29] audit: type=1400 audit(1749206861.954:34737): avc: denied { setopt } for pid=11811 comm="syz.0.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 267.541781][ T29] audit: type=1400 audit(1749206861.964:34738): avc: denied { setopt } for pid=11811 comm="syz.0.1945" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.572038][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.606152][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1941'. [ 267.643991][ T29] audit: type=1400 audit(1749206862.134:34739): avc: denied { ioctl } for pid=11800 comm="syz.2.1941" path="socket:[33270]" dev="sockfs" ino=33270 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 267.669073][ T29] audit: type=1400 audit(1749206862.134:34740): avc: denied { bind } for pid=11800 comm="syz.2.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 267.688765][ T29] audit: type=1400 audit(1749206862.204:34741): avc: denied { unmount } for pid=9024 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 267.858679][ T29] audit: type=1326 audit(1749206862.404:34742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11821 comm="syz.6.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeff9ce929 code=0x7ffc0000 [ 267.882499][ T29] audit: type=1326 audit(1749206862.404:34743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11821 comm="syz.6.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeff9ce929 code=0x7ffc0000 [ 267.906088][ T29] audit: type=1326 audit(1749206862.404:34744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11821 comm="syz.6.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeff9ce929 code=0x7ffc0000 [ 267.935886][T11822] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1948'. [ 267.980837][T11828] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 267.980837][T11828] Ue[%#s' [ 268.004348][T11822] loop6: detected capacity change from 0 to 512 [ 268.017577][T11822] EXT4-fs: Ignoring removed i_version option [ 268.031160][T11822] ext4: Bad value for 'auto_da_alloc' [ 268.170701][T11836] openvswitch: netlink: Message has 6 unknown bytes. [ 268.190246][T11837] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 268.190246][T11837] Ue[%#s' [ 268.221966][T11839] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 268.221966][T11839] Ue[%#s' [ 268.682452][T11851] lo speed is unknown, defaulting to 1000 [ 269.068622][T11856] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 269.068622][T11856] Ue[%#s' [ 269.203234][T11862] openvswitch: netlink: Message has 6 unknown bytes. [ 269.221634][T11866] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 269.221634][T11866] Ue[%#s' [ 269.330287][T11872] cgroup: none used incorrectly [ 269.381341][T11875] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 269.381341][T11875] Ue[%#s' [ 269.597468][T11879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.627756][T11879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.635198][T11879] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 269.651843][T11879] bond2: (slave vcan1): Error -95 calling set_mac_address [ 269.841333][T11885] loop3: detected capacity change from 0 to 128 [ 269.864046][T11885] syz.3.1970: attempt to access beyond end of device [ 269.864046][T11885] loop3: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 269.888947][T11885] syz.3.1970: attempt to access beyond end of device [ 269.888947][T11885] loop3: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 269.902413][T11885] Buffer I/O error on dev loop3, logical block 156, lost async page write [ 269.913399][T11885] syz.3.1970: attempt to access beyond end of device [ 269.913399][T11885] loop3: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 269.926883][T11885] Buffer I/O error on dev loop3, logical block 157, lost async page write [ 269.935532][T11885] syz.3.1970: attempt to access beyond end of device [ 269.935532][T11885] loop3: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 269.949290][T11885] Buffer I/O error on dev loop3, logical block 158, lost async page write [ 269.958480][T11885] syz.3.1970: attempt to access beyond end of device [ 269.958480][T11885] loop3: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 269.972054][T11885] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 269.981163][T11885] syz.3.1970: attempt to access beyond end of device [ 269.981163][T11885] loop3: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 269.994592][T11885] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 270.003382][T11885] syz.3.1970: attempt to access beyond end of device [ 270.003382][T11885] loop3: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 270.016839][T11885] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 270.028774][T11885] syz.3.1970: attempt to access beyond end of device [ 270.028774][T11885] loop3: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 270.042204][T11885] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 270.050944][T11885] syz.3.1970: attempt to access beyond end of device [ 270.050944][T11885] loop3: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 270.064363][T11885] Buffer I/O error on dev loop3, logical block 133, lost async page write [ 270.073016][T11885] syz.3.1970: attempt to access beyond end of device [ 270.073016][T11885] loop3: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 270.086477][T11885] Buffer I/O error on dev loop3, logical block 150, lost async page write [ 270.095686][T11885] Buffer I/O error on dev loop3, logical block 151, lost async page write [ 270.143548][T11895] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 270.143548][T11895] Ue[%#s' [ 270.178346][T11897] __nla_validate_parse: 15 callbacks suppressed [ 270.178357][T11897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1974'. [ 270.203915][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1973'. [ 270.227288][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1976'. [ 270.227321][T11897] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11897 comm=syz.2.1974 [ 270.240367][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1976'. [ 270.265470][T11899] openvswitch: netlink: Message has 6 unknown bytes. [ 270.266747][T11901] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 270.266747][T11901] Ue[%#s' [ 270.327983][T11905] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 270.327983][T11905] Ue[%#s' [ 270.356182][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1975'. [ 270.379950][T11907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1978'. [ 270.414165][T11910] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 270.414165][T11910] Ue[%#s' [ 270.432006][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1977'. [ 270.468501][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1979'. [ 270.488788][T11915] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 270.488788][T11915] Ue[%#s' [ 270.527302][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1981'. [ 270.768357][T11929] wireguard0: entered promiscuous mode [ 270.799052][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1987'. [ 270.816636][T11936] siw: device registration error -23 [ 270.863025][T11938] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 270.863025][T11938] Ue[%#s' [ 270.948316][T11944] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 271.042156][T11951] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 271.042156][T11951] Ue[%#s' [ 271.437385][T11952] lo speed is unknown, defaulting to 1000 [ 271.492616][T11958] siw: device registration error -23 [ 271.703326][T11968] siw: device registration error -23 [ 271.726482][T11970] loop1: detected capacity change from 0 to 1024 [ 271.726927][T11970] journal_path: Non-blockdev passed as './file1' [ 271.726952][T11970] EXT4-fs: error: could not find journal device path [ 272.034449][T11977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.035403][T11977] team0: Port device batadv0 added [ 272.075579][T11977] loop1: detected capacity change from 0 to 512 [ 272.089086][T11979] wireguard0: entered promiscuous mode [ 272.107534][T11977] EXT4-fs (loop1): 1 orphan inode deleted [ 272.107900][T11977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.108181][ T29] kauditd_printk_skb: 763 callbacks suppressed [ 272.108191][ T29] audit: type=1400 audit(1749206866.654:35508): avc: denied { mount } for pid=11973 comm="syz.1.1999" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 272.108238][T11977] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.109102][ T29] audit: type=1400 audit(1749206866.654:35509): avc: denied { remount } for pid=11973 comm="syz.1.1999" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 272.109568][ T5879] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 272.109590][ T5879] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:17: Failed to release dquot type 1 [ 272.110821][T11977] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 272.139207][T11984] siw: device registration error -23 [ 272.203094][ T29] audit: type=1400 audit(1749206866.744:35510): avc: denied { bind } for pid=11985 comm="syz.6.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.204280][ T29] audit: type=1400 audit(1749206866.744:35511): avc: denied { setopt } for pid=11985 comm="syz.6.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.207501][T11986] vhci_hcd: default hub control req: 4001 v0008 i0003 l0 [ 272.207902][T11986] netlink: 'syz.6.2002': attribute type 10 has an invalid length. [ 272.208468][ T29] audit: type=1400 audit(1749206866.754:35512): avc: denied { execmem } for pid=11985 comm="syz.6.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 272.208568][ T29] audit: type=1400 audit(1749206866.754:35513): avc: denied { execute } for pid=11985 comm="syz.6.2002" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=33523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 272.341104][ T29] audit: type=1400 audit(1749206866.884:35514): avc: denied { audit_write } for pid=11989 comm="syz.6.2005" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 272.341143][ T29] audit: type=1107 audit(1749206866.884:35515): pid=11989 uid=60928 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 272.437726][T11994] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 272.437726][T11994] Ue[%#s' [ 272.466139][ T29] audit: type=1400 audit(1749206867.014:35516): avc: denied { ioctl } for pid=11989 comm="syz.6.2005" path="socket:[33542]" dev="sockfs" ino=33542 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 272.646617][T11999] lo speed is unknown, defaulting to 1000 [ 272.887433][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.903644][T12002] loop6: detected capacity change from 0 to 1024 [ 272.919713][T12002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.928582][T12006] netlink: 'syz.1.2009': attribute type 1 has an invalid length. [ 272.954935][T12006] loop1: detected capacity change from 0 to 512 [ 272.967766][T12006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.983621][T12006] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.081112][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.159701][T12013] openvswitch: netlink: Message has 6 unknown bytes. [ 273.354306][T12018] ================================================================== [ 273.362523][T12018] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 273.370459][T12018] [ 273.372793][T12018] write to 0xffffea0005164dd8 of 8 bytes by task 12002 on cpu 0: [ 273.380520][T12018] __filemap_remove_folio+0x1a5/0x2a0 [ 273.385898][T12018] folio_unmap_invalidate+0x1dd/0x360 [ 273.391268][T12018] invalidate_inode_pages2_range+0x27c/0x3d0 [ 273.397243][T12018] filemap_invalidate_pages+0x16d/0x1a0 [ 273.402785][T12018] kiocb_invalidate_pages+0x6e/0x80 [ 273.407985][T12018] __iomap_dio_rw+0x5d4/0x1250 [ 273.412758][T12018] iomap_dio_rw+0x40/0x90 [ 273.417100][T12018] ext4_file_write_iter+0xad9/0xf00 [ 273.422300][T12018] iter_file_splice_write+0x5f2/0x970 [ 273.427678][T12018] direct_splice_actor+0x156/0x2a0 [ 273.432803][T12018] splice_direct_to_actor+0x312/0x680 [ 273.438201][T12018] do_splice_direct+0xda/0x150 [ 273.442981][T12018] do_sendfile+0x380/0x650 [ 273.447413][T12018] __x64_sys_sendfile64+0x105/0x150 [ 273.452620][T12018] x64_sys_call+0xb39/0x2fb0 [ 273.457215][T12018] do_syscall_64+0xd2/0x200 [ 273.461724][T12018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.467613][T12018] [ 273.469930][T12018] read to 0xffffea0005164dd8 of 8 bytes by task 12018 on cpu 1: [ 273.477552][T12018] folio_mapping+0xa1/0x120 [ 273.482055][T12018] folio_wait_writeback+0x43/0x140 [ 273.487173][T12018] file_write_and_wait_range+0x20b/0x2c0 [ 273.492822][T12018] generic_buffers_fsync_noflush+0x45/0x120 [ 273.498736][T12018] ext4_sync_file+0x1ab/0x690 [ 273.503426][T12018] vfs_fsync_range+0x10d/0x130 [ 273.508195][T12018] ext4_buffered_write_iter+0x34f/0x3c0 [ 273.513742][T12018] ext4_file_write_iter+0xdbf/0xf00 [ 273.518957][T12018] iter_file_splice_write+0x5f2/0x970 [ 273.524339][T12018] direct_splice_actor+0x156/0x2a0 [ 273.529457][T12018] splice_direct_to_actor+0x312/0x680 [ 273.534836][T12018] do_splice_direct+0xda/0x150 [ 273.539605][T12018] do_sendfile+0x380/0x650 [ 273.544023][T12018] __x64_sys_sendfile64+0x105/0x150 [ 273.549220][T12018] x64_sys_call+0xb39/0x2fb0 [ 273.553810][T12018] do_syscall_64+0xd2/0x200 [ 273.558316][T12018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.564204][T12018] [ 273.566520][T12018] value changed: 0xffff888106b76998 -> 0x0000000000000000 [ 273.573637][T12018] [ 273.575956][T12018] Reported by Kernel Concurrency Sanitizer on: [ 273.582099][T12018] CPU: 1 UID: 0 PID: 12018 Comm: syz.6.2008 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 273.594242][T12018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.604293][T12018] ================================================================== [ 273.708492][T12017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.795163][T12017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.899761][T12017] loop1: detected capacity change from 0 to 512 [ 273.957102][T12017] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 273.974496][T12017] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e12c, mo2=0002] [ 273.997572][T12017] System zones: 1-12 [ 274.001657][T12017] EXT4-fs (loop1): orphan cleanup on readonly fs [ 274.002432][ T9024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.017828][T12017] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2012: bg 0: block 361: padding at end of block bitmap is not set [ 274.032657][T12017] EXT4-fs (loop1): Remounting filesystem read-only [ 274.044466][T12017] EXT4-fs (loop1): 1 truncate cleaned up [ 274.050521][T12017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 274.110570][T12017] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.2012: error -117 reading directory block [ 274.634850][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.