last executing test programs: 55.486596714s ago: executing program 1 (id=198): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) r3 = gettid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000003c0)=""/4096, 0x1000) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x1c) setsockopt$inet_mreqsrc(r5, 0x0, 0x25, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000540)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r7, 0x3, r6}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 54.538869858s ago: executing program 1 (id=206): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="fe4cecb210bc091b10"], 0x53) r7 = syz_open_procfs(0x0, &(0x7f0000000640)='uid_map\x00') readv(r7, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r4 = socket(0x1e, 0x4, 0x0) clock_gettime(0x0, &(0x7f0000000b80)={0x0, 0x0}) recvmmsg$unix(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000340), 0x6e, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000500)=""/137, 0x89}], 0x2, &(0x7f00000005c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000680), 0x0, &(0x7f00000006c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000000800), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/82, 0x52}, {&(0x7f0000000900)=""/12, 0xc}, {&(0x7f0000000940)=""/79, 0x4f}], 0x3, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x3, 0x80, &(0x7f0000000bc0)={r5, r6+10000000}) getsockname$packet(r4, 0x0, &(0x7f00000000c0)) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000002c0), &(0x7f0000000300)=0x8) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3000000}}}]}, 0x28}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) setresgid(0x0, 0x0, 0xee00) r10 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@rand_addr=0x64010101, @in=@private=0xa010101, 0xfffc, 0x1, 0x0, 0x200, 0x2}, {0x0, 0x6, 0x0, 0x8004, 0x6, 0xfffffffffffffffe, 0x0, 0x400}, {0x5}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x6c}, 0xa, @in=@empty, 0x3501, 0x5, 0x8, 0x0, 0x9075, 0x0, 0x4}}, 0xe8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000680)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r14 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r14, 0x0, 0x0, 0x810, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x200017, {{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {0xffffffffffffffff}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r12, 0x4}}]}, 0x144}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0xb, 0x3}, {0x5}, {0x1, 0xffe0}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x24010890) 52.35337377s ago: executing program 1 (id=218): openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)={0x610400, 0xa, 0x36}, 0x18) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8410b, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x0, @perf_config_ext={0x1, 0x3}, 0x1db24, 0x4, 0x3, 0x5, 0x9, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="adffa88801200500180012800e0001007769726567756172640000000400028004001a800800040003000000"], 0x44}}, 0x440088c4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) set_tid_address(0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f00000000c0)=0x8) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000480)={@private0}, &(0x7f00000004c0)=0x14) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000d80)="bc14", 0x2}], 0x1, 0x0, 0x0, 0x4000010}, 0x20004011) recvmsg$unix(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 51.389593925s ago: executing program 1 (id=226): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000100)={0x11, 0x4}, 0x14) connect$unix(r1, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timerfd_create(0x0, 0x0) 50.831173123s ago: executing program 1 (id=231): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x20000327, &(0x7f0000000280)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='mm_lru_insertion\x00', 0xffffffffffffffff, 0x0, 0x152}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000300)={0xff, 0x9, 0x8, "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"}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r4, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r7) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) unshare(0x2040400) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r9}, &(0x7f0000000540), &(0x7f0000000580)=r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 35.461831332s ago: executing program 32 (id=231): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x20000327, &(0x7f0000000280)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='mm_lru_insertion\x00', 0xffffffffffffffff, 0x0, 0x152}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000300)={0xff, 0x9, 0x8, "5f05115cad34779265347101cac4ba900036a3ee7b8ea0e09fb8153a756bd1350c1b4fc5bfbf44f6103697f07911a706408730d0c0baf459ed762d165a3cfc451c5dabe46f1ac0ba51c7f8eb726708819b839ed97cc0e94f763fcc702cfd86eef7b8bd46dd4b980bceec5b7a367bdb836ae7d73eb5961128501b98ba1271cb948705f45c3980ddc9d5f9314c1c5e0160b99a94e1dd988dc523a70b6a2744287dae99af7d94229a7d0869ab29444e61fccb950e4ea79194def41dac4d7c771d9f3269f6d0b4df3002ddcf8bf2e994770c61dd49c22dac8be4b652828f29d0e4a1f5f6990ab4b638351437e9e5a3480fc2084e31f1a8fb2d91f4ad2b1ac0abe6"}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r4, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r7) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) unshare(0x2040400) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r9}, &(0x7f0000000540), &(0x7f0000000580)=r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.800416364s ago: executing program 4 (id=530): socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) open_tree(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x88101) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0x1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) add_key$user(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000004c0)="8b3d4fbac876a4a198f4d3", 0xb, 0xfffffffffffffffb) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGUNIQ(r5, 0x80404508, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x80000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.746333485s ago: executing program 4 (id=531): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123400, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3302, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000780)=ANY=[@ANYRES16=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r8}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000740)=ANY=[@ANYBLOB="4500001400000000942523fc0c2c43cc6f00", @ANYRES8=r7], 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$PTP_ENABLE_PPS(r4, 0x40043d04, 0x0) r9 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_da_reserve_space\x00', r10, 0x0, 0x1fc5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="19"], 0x48) r11 = socket$l2tp6(0xa, 0x2, 0x73) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x1000000, 0x0, 0x0, 0x1) getsockopt$IP6T_SO_GET_REVISION_TARGET(r11, 0x29, 0x45, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) write$selinux_access(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) r12 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r12) 5.182213393s ago: executing program 3 (id=537): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) socket(0x18, 0x5, 0x86b0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000300)=""/112, 0x103000, 0x6bc22fd484172ea7, 0xc, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) init_module(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 4.885236748s ago: executing program 4 (id=540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r2, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfc28a4d08c47c0f63020000f8ffffffb703000000000000b704000000f70000850000005700000095aaac453075a37691fb2acd558aa52f1b038d3a37fa54f7ddf62b34fd03e89c4ccfaa11fa6dfd50dc941777"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x65, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) 4.212124528s ago: executing program 3 (id=545): perf_event_open(&(0x7f0000000840)={0x5, 0x80, 0x47, 0x7, 0x8, 0xb, 0x0, 0x0, 0x40, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000580), 0x6}, 0x100d07, 0x7ff, 0xc, 0x9, 0x81, 0x2, 0x5, 0x0, 0x3b, 0x0, 0x8000000000000002}, 0x0, 0xc, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) lsetxattr$security_selinux(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000002c0), &(0x7f0000000780)='system_u:object_r:fuse_device_t:s0\x00', 0x23, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f000089f000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1a, &(0x7f0000000600)=[{}], 0x0, 0x10, &(0x7f0000000440), &(0x7f00000005c0), 0x8, 0x4000004, 0x8, 0xffffff87, &(0x7f00000003c0)}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="1eb1f2e08cfd49e756556cf53cabeaeb8eb1c3ecb7e4c01082e87d9d977e0548cf822495ee5d794133788e82489dbce7e979da75d4890ef95fdf4f05dfba96c80d92529dfb2e0fcc156b7c5f76543030532e9b99928985714f770fe893a0893d237626992277973961eef585aaadcb3d79b4fc9aa90584115dfcc18a2905896d591f1b46ece07a5bce16eae6b495902e992cd72fb9bfb53800000000", @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600"], 0x44}}, 0x0) epoll_create1(0x80000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x3) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000003700)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000300)=""/59, 0x3b) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x82, &(0x7f0000000000)={0x0, 0x10001}, &(0x7f0000000400)=0x8) syz_mount_image$ext4(0x0, &(0x7f00000008c0)='./file0/file0\x00', 0x22003, 0x0, 0x1, 0xfffffffffffffff0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3.36732472s ago: executing program 2 (id=550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x3, 0x1088f109, 0xfffb, 0x0, 0x5, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)=ANY=[]) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r8, 0x110, 0x5, &(0x7f0000000080)=[0x1, 0x2], 0x2) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000000000000000059"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) readv(r12, &(0x7f0000001b40)=[{&(0x7f0000001a40)=""/208, 0xd0}], 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@cgroup=r12, r10, 0x34, 0x1000, r9, @void, @value=r9}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8946, &(0x7f0000000080)) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x3, [0xb, 0xb, 0xa, 0x7, 0xf, 0x5, 0xc, 0x7, 0x3, 0x5, 0xd, 0x3, 0xd, 0x7, 0x9, 0x3], 0x1, [0x3, 0x3, 0x1, 0x6, 0xfffa, 0x5, 0xfff, 0x0, 0xb4, 0x401, 0x6, 0x7, 0x81, 0xffff, 0x9, 0x4], [0x400, 0x6, 0x800, 0x493, 0xd, 0x5, 0x5, 0x2, 0x2, 0x8, 0x0, 0x6e, 0x1, 0x9, 0x9, 0xff08]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 3.339823591s ago: executing program 3 (id=551): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4EQeZ31JruwsF72sBQaCLSnHpoYWTGpZStYcoiNaRNKoZdCW3prLzn356X02h+HXtr/oySkrROa0kNxGf2wZVtyrMSWkubzgYne07zRe995ozcvmrEUwBNrPP0nE3EsIl5PIkbrzycR0V9NZSOma+Xura/l0yWJjY1nvkuqZe6ur+WjaZvUkXrmjxHx+SsRJzK76y2vrM7PFIuFpXp+orJweaK8snry0sLMXGGusHh6cmrq1Jl/nDn9UOENN2d++Hr16K03/v/XD6Z/evkPH772RRLTcbS+rjmOgzIe4/V90p/uwm3+d9CV9czHL+6jUNMRkD3MxtChtGP66r1yLEajb6/+Ge5mywCAw/JSRGy009d2DQDwWEtq5///9LodAEC3ND4HuLu+lm8svf1Eortu/zcihobqudr1zVo6W79mN1S9DjpyN9l2ZSSJiLEDqH88It755Pn30iUO6TokQCvXrkfEhbHx3eN/suuehU79rfXTc82Z8R0rjX/QPZ+m859/tpr/ZTbnP9Fi/jPY4r37IO7//s/cPIBq2krnf/9uurftXlP8dWN99dxvqnO+/uTipWIhHdt+GxHHo38wzU/uUcfxOz/fabeuef73/ZsvvJvWnz5ulcjczA5u32Z2pjLzMDE3u3094k/ZVvGn4/9gtf+TNvPfc/X0wH3qeOpfr77dbl0afxpvY9kd/+HauBHxl5b9n2yWSfa8P3GiejhMNA6KFj6ajpF29Y9nt/o/XdL6G/8X6Ia0/0f2jn8sab5fs7zvl968W+yrG6OftSvUfPy3jr/18T+QPFtNN469qzOVytJkxEDy9O7nT21t28g3yqfxH/9z6/d/Y/xrcfw/l77+hX3uiOytb99/8PgPVxr/bEf933Eihu7N97Wrf3/9P7Vtm/2Mf/tt4IPuNwAAAAAAAAAAAAAAAAAAAAAAAADoRCYijkaSyW2mM5lcrvYb3r+PkUyxVK6cuFhaXpyN6m9lj0V/pvFVl6NN34c6Wf8+/Eb+1I783yPidxHx1uBwNZ/Ll4qzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqOtPn9/9Q3gzsK9/WihQDAoRhyYgeAJ02Szfa6CQBAtw11VHr40NoBAHRPZ+d/AODXwPkfAJ489zn/7/wzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjUubNn02Xjx/W1fJqfvbKyPF+6cnK2UJ7PLSznc/nS0uXcXKk0Vyzk8qWFti90rfZQLJUuT8Xi8tWJSqFcmSivrJ5fKC0vVs5fWpiZK5wv9HctMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYv/LK6vxMsVhYkuhJYv7LWj88Ku2R6CwR12r996i05+ASMbA1Sgz3ZnACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAz8EgAA//99gB7t") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x50, &(0x7f0000000080)={&(0x7f0000001900)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f1f3ac9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307de49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340aa4bfe771769c6ddb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30b0f7c70facc009e5eaa9517a6176c80d6fe9025450ca202a454d28f0282742f84de4648a0c28278b4d473736f126eed48348d219d9147846b6c97dd0b6e92f5b02ffecfdee01d5873df9af20913ae4ec6105d5b7a88ad67910450ec0769537"], 0xb98}}, 0x0) socket$packet(0x11, 0x2, 0x300) open(&(0x7f0000000180)='./bus\x00', 0x14127f, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x104, 0x3}) r5 = memfd_secret(0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) r6 = open(0x0, 0x64842, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") setgroups(0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0]) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) pwritev2(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x7c00, 0x0, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, 0x0, &(0x7f0000000040)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r8}, 0x10) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) timer_getoverrun(0x0) socket$nl_route(0x10, 0x3, 0x0) 3.194980963s ago: executing program 3 (id=552): socket$nl_route(0x10, 0x3, 0x0) setresgid(0x0, 0xee01, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f00000008c0)=0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32, @ANYBLOB="0000000000000000180034"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440), 0x10000, &(0x7f0000000900)={'trans=virtio,', {[{@cache_mmap}, {@access_any}], [{@fowner_eq}, {@dont_appraise}, {@euid_gt={'euid>', r0}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x62, 0x39, 0x39, 0x65, 0x64, 0x0, 0x62], 0x2d, [0x36, 0x33, 0x62, 0x36], 0x2d, [0x66, 0x34, 0x34, 0x61], 0x2d, [0x33, 0x65, 0x34, 0xa], 0x2d, [0x6f, 0x37, 0x6c, 0x64, 0x62, 0x64, 0x30, 0x62]}}}]}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x3, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r5, r5, 0x0, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@remote, {}, {0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) close(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r10 = dup(r9) write$P9_RLERRORu(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x0) 3.099094124s ago: executing program 3 (id=554): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket(0x1d, 0x80000, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x494816459c341ca6}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000002c0)=0x108a, 0x4) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=tcp']) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32250000000900010073797a3000000000080005400000001f"], 0xec}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r6, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8, 0x0, 0x192}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket(0x200000000000011, 0x2, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) 2.977324456s ago: executing program 5 (id=555): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003803000000000000000000000000000000000300000000010000000200000001000080006100"/83], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sched_switch\x00', r5}, 0x18) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r7, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf"}) ioctl$TIOCGPGRP(r7, 0x5437, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x40000000) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x6020, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r10, r1, 0x2, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r11, 0x0, 0x0, 0xa0e54044ef4acb5, &(0x7f0000000340)={0x11, 0xd, r12}, 0x14) 2.975601876s ago: executing program 5 (id=556): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) socket(0x18, 0x5, 0x86b0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000300)=""/112, 0x103000, 0x6bc22fd484172ea7, 0xc, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) init_module(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 2.914473957s ago: executing program 2 (id=557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x5, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/167}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000010000)=0x4, &(0x7f00000017c0)='%ps \x00'}, 0x20) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0xf, &(0x7f0000000d40)=ANY=[@ANYRES16=r0, @ANYRES32=r2, @ANYRES16, @ANYRESOCT=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001380)="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", 0x117}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000180)="24aeb629fe7b9365d7b070ec00000040738d0e31230b870ed50f6d166478d2b3e4963ba03800c460d40436d5d6dd73c8b2cf41e6937baa57c249d2bed4d36b15b641c2766034b01209e60dfa5ade22e0d4d897f05005799bdccfdd63a57071ae1dcb969a498512bc5544c935d9a6bcd83023a3273285119b7dca7195b4e9a06313e5ea7216706b86fec41cd475b6028b0ad94a7f4ecfba8d380208febb6670f078d0a460ec128c1bb7c6", 0xaa}, {&(0x7f0000000380)="064b5a44bc841d0eb3cde7939f732de2357f57de1b028d9c939cf361d6e17fd0a67ea6b6456bb6c3c6739facbfbff1201931291b341b298590f55f00f3874ce872dbc3ce8cda35ace31b9b334bb5a9165ed6c44eecae86a24d83e1d288d3dd466809e24f0dc811508e518851cd83141ee9ba314b9f0398eaa68f6eae7e8ae7f63b846b74e2178d35f52c2ab884891ea40c2ce9b48fb4f5ce8f8ebfada1e4b15a367904af34b5d705f4130309ed83916c416f91224b852695a76bc8a8b95874d54bbd0f583fd39f957277b27ceb0348eeb5b30e9a5ddb33a6ad8d3a4aa2998997", 0xe0}, {&(0x7f00000002c0)="1605c41488222e501df162ae251a0959ad74eebcb67a7a8df3f2f742cb505b5f305b7e4c0806dd887ce286c0a4ee4878527dfac1e149c4ba454e77021a92e325a7aa1b1b7e09bd91cdb6b9619ae6f8bc6be45840a2bb31c3f8ad6651e1ab", 0x5e}, {&(0x7f0000000240)="7457b2316e204aba6b591334c56be87dc6b5ec55cf130145", 0x18}, {&(0x7f0000000c00)="cdf3015ae846337720622f5ef786deee3b963ec31593af3e36f09ccbb64dcf5afc09d82f57e74df1f5fceb84dd15441e", 0x30}, {&(0x7f0000000c40)="645ae8fd31b3c84f6b49d710c86a75c8975baf0e80ffbba753a5dbc06bf3f6e09db2655db3539859eab379da476e7e93e21e317ca8321db540d815d0bceda8ffa2a594e00ba059d24bb7b2c1d926627d66dedb436faf50044f831c606e5d0338249fd87c2448393537362aebbc8d47fade3144643fc23015565cd1569db23cff792bc7f5c7d21ac333cd46175f6660c6789cf5a52d46f2e54284b6e42cecbaf6f60b911c318cea90bc55e98a2f179c720396b563a6105c4969c601ac22b7519b662dbcd443c5", 0xc6}, {&(0x7f00000011c0)="391a801fafa501e3c39f22b7a7a1b8bfe2654d4adf75ebd4cf0abc569034d806af94ba3df408814a7205aa90488a763eef742e33f4647211d281ea5bec7865622c9008c598f0351ea915cf6483b7ff802726403a16840a36b0ce829d7adc78b907d3fdd830aa7a77ad42a521abb7378df83029afdf8721c9674fc18b64bf62fdc6f771137385bd", 0x87}, {&(0x7f0000000d80)="d040d166e5524b32f593d012fe3e0fb2f167cebba4d607e75855b081195b3c3f25b9bc58fefcd81d2ab76bfae62df8bd10b4452be9704c58b8fe678b3a49cd3f1fd08f0614196f60d677294bdad42c2fe41e407b4e5a180cfccfa5a454ba3a", 0x5f}], 0x8, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffffffffffff00000000110000000000000000000000010000000800000000000000c0000000000000000000000007000000000713077f000001640101027f000001ffffffff440c3493e00000010000000494040100868c000000020207f74ea75f9d010b12f2ec980a07e40c950611804d3c1ae7d99bdf24af4c458c9d7f010bdd8af270d8997426f6061286006d06ccbe572e0000000000000000050bf6b4728cdc94b773da0012af8ceedb9567d2a29f509c62d87b7344060ec2933c6984a30cd11d513c08060b77a0338aa2137f71360510ca"], 0xf8}, 0x4041) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_DELSET={0x0, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1a0}, @NFTA_SET_DATA_LEN={0x0, 0x7, 0x1, 0x0, 0x15}, @NFTA_SET_DATA_TYPE, @NFTA_SET_GC_INTERVAL={0x0, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_USERDATA={0x0, 0xd, 0x1, 0x0, "984d3f772bcc34fb25ef45a0b362ebaf0996755f823c9859647c5af945bfd6542abf4b07c02f01614b846b0fac92df89f178668cd9d641de7abece0edc42fd6a5e57ae0945e1a2c5beddaef953f68f41e34a2903170308ec071b05e0410aa40f7deeb64bb5114744211d9e1d79bc7a0ea685239055294fb65f9bd21c9c4f474680f19f4c00eba4943c01d2c7c26d4605c8ccee77201fa23dd6931741486c3bbbdcbf1eab73790c55d809abccbfca4d47f4684c72c9eadab9f7e5"}, @NFTA_SET_DATA_TYPE={0x0, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40008d4}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$loop(&(0x7f00000002c0), 0x3, 0x2c001) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) recvfrom$unix(r1, &(0x7f00000004c0)=""/96, 0x60, 0x40010020, &(0x7f0000000540)=@file={0x0, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 2.809735188s ago: executing program 2 (id=558): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0), 0x13f}}, 0x20) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000439e00001600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, "d65960", 0x18, 0x6, 0x1, @local, @loopback, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, 0x2, 0x3, 0x0, 0x2, 0x6, 0x5, 0x0, 0x1, 0xfffa, 0x3, 0x24e21, 0x4e22}}}}}}}}, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000e5000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r11}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file2\x00', r10, 0x4000, r12}, 0x18) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r14}, 0x10) alarm(0xb3af) 2.751892379s ago: executing program 0 (id=559): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="fe4cecb210bc091b10"], 0x53) r7 = syz_open_procfs(0x0, &(0x7f0000000640)='uid_map\x00') readv(r7, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000200)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xf60, 0x4}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x3, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f00000000c0), 0x0, 0x8000c64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40000180, 0x1}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000380), 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) readv(r11, &(0x7f0000000100)=[{&(0x7f0000000400)=""/28, 0x1c}], 0x1) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r12, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_xfrm(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1e00010000000000000000000000007f0000010000000000000000040000000000000a0080005e0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d432000000ac141400000000000000000000000000fdffffffffffffff00000000000000040100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000200000000000000000000000000100000000000000000000300000000000000010000000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 1.891700032s ago: executing program 5 (id=561): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @multicast2}, &(0x7f00000000c0)=0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$packet(0x11, 0x3, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r9}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000200)={r10}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={r11, 0x0, r6}) ioctl$KDSIGACCEPT(r5, 0x5607, 0x3) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x7fff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r4}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) sched_setscheduler(r12, 0x5, &(0x7f00000001c0)=0x3) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000480021042abd7000fcdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="4000000008004f5dee8eeffff0eff21dc102f80400000014000100ff02000000"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.891330752s ago: executing program 2 (id=562): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r2], 0x30}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) rt_sigpending(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="18000000ed07449e000000000000000018010000", @ANYBLOB="0000000000aa150000000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYRESOCT, @ANYRESHEX=r1, @ANYRES32=r1, @ANYRES8], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x15a}) io_uring_enter(r7, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r6, 0x0, 0x80}, 0x18) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r8) socket$inet6_sctp(0xa, 0x5, 0x84) 1.890696042s ago: executing program 4 (id=563): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002306000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000340)='sys_enter\x00', r1}, 0x4b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) io_setup(0x7, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15560100ef000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sessionid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$ptp(r7, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socket(0xa, 0x6, 0x54) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r8) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001e80)={0x844, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5b33, 0x3e}}}}, [@NL80211_ATTR_IE={0xe9, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xb8, 0x8}}, @tim={0x5, 0x3a, {0x40, 0x6, 0x8, "3cde07f95922850c717059289ccfdb8bf3d59e3acd32fbd2fed7c7fb4f045c496726a8ca7ff5dc0191a44237c3f251cbef6c193e4b600b"}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0x87, {0xd, 0x6, 0xc3, "df0aaf02a07481a5617f1f8d605b91c6f1a2ff3bf34bf1908ec779ca2dd19f7d6f6229b9dd82025b7777a2a0b6292e28f0e97dda079ae1383c3d8efbb59565a0dfabf4125af32e1022f3b5ef83d018dd0fd61681f2621416e38249273f3d2fab3e105d6196b2a14283addf42bf7cc6c33f05aa761aeba24a84a6fd809da0e4bf8ecb45f8"}}, @dsss={0x3, 0x1, 0xae}, @gcr_ga={0xbd, 0x6, @broadcast}, @ibss={0x6, 0x2, 0x10}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x14, 0x80, [@mesh_chsw={0x76, 0x6, {0x7, 0x81, 0x16, 0x1}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x18a, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @broadcast, @broadcast, @initial, {0xb, 0x8}, @value=@ver_80211n={0x0, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x3, @default, 0x40, @void, @void, @void, @val={0x4, 0x6, {0x5, 0xff, 0x7, 0xefc6}}, @void, @val={0x5, 0x6f, {0x5, 0x7d, 0x4, "188a041421e08082b58241011861c9ec16299128dc43206ca1ec9f675532ee092a22f335b9a25cd50b18cf94faf31e9f77263ee92a33cdfb79b4d510bc57e2faef8c5fb2b4a472522e0aa781b481673f0c0abc54f3eb41c9748e7598ddcbae20ad797396150e2fe4274ba72d"}}, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0xd, 0xab, 0x1}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xd2, "b5b36855cc558af12bd9598ebe36584ef0e6fdc86bc5e7aee6be981a877f343f2dcf28537310b2e1499cf07947f73f859c734d50e6ab435cb710d00fd2d3d85b241428cbd3092566930246421cc4583e0db7b649b78ab5a2c29f0b07e36931c950742ceaa8c3f46cb7ecbaad0667c6e6bdf7c8bda115938824465fe1f0aa9fa4999738c1e93666a996859cf25993c218ce78f2ac98284b5352801e819bd7728fbb2a2b4612085839cf729eff4247a6ecf490307a3d7f0af3167788bfc07ba0a783b808c41f68f764843ddf852d1eab9c1381"}]}}, @NL80211_ATTR_IE={0x8c, 0x2a, [@random={0x6, 0x56, "54680ea102c3d0d2b332f9e8806699b3bded50f651106fc7b15863c5841116ac264c76e740ceea522249094a050d0bf5c647a2b3751c2fe02822145a1fb950455fc3e17715c82c0a85b0cf87baf7ce206f079202539e"}, @gcr_ga={0xbd, 0x6}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @link_id={0x65, 0x12, {@initial, @broadcast}}]}, @NL80211_ATTR_BEACON_TAIL={0xd0, 0xf, [@perr={0x84, 0x88, {0xf6, 0x8, [{{}, @broadcast, 0x1, @void, 0x6}, {{0x0, 0x1}, @broadcast, 0x24bd76e5, @value=@broadcast, 0x20}, {{0x0, 0x1}, @device_b, 0xad, @value=@device_b, 0x42}, {{0x0, 0x1}, @broadcast, 0xfffffffb, @value=@broadcast, 0x2d}, {{0x0, 0x1}, @broadcast, 0x216, @value=@broadcast, 0x41}, {{}, @device_a, 0xffffffff, @void, 0x24}, {{0x0, 0x1}, @device_a, 0x3ff, @value, 0x41}, {{}, @device_b, 0x1, @void, 0x35}]}}, @measure_req={0x26, 0x40, {0x0, 0xf3, 0x3, "ba8c9efeb7c584c7a84c935f78103ef7a72bbb55309e33e8fbf3c0ce7552d202aa80d4273ae3cf4789a7c57f7813c40f8a0a75be072880233b5959f617"}}]}, @NL80211_ATTR_BEACON_HEAD={0xcb, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7}, @device_a, @broadcast, @random="99be6ca52344", {0xc, 0x3}, @value=@ver_80211n={0x0, 0x2, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x4, @random=0x1, 0x42aa, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0x1, 0x4, 0x9, 0x5}}, @void, @val={0x5, 0x39, {0x1, 0x3c, 0x8c, "95c691f653b2afb144b8a82a563d8a87086e99e8fe1536e0cd12fb6ab412bf6c2b0dbaf3e71ced905a0f2656295aa4d3078dea1dd9c3"}}, @val={0x25, 0x3, {0x0, 0xb7}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0xc, 0x3, 0x1, 0x0, {0x8001, 0x3, 0x0, 0x8, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x800, 0x5, 0x2}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0xb}}, @void, [{0xdd, 0x25, "09aaeecd6d00234f2b767ee79f18692ae894491c6f853b61272b719606b8352b37cb4ff4de"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x15d, 0x7f, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0xea, @device_b, 0x3, @value=@broadcast, 0x43b9c31f, 0x7, @broadcast, 0x1}}, @chsw_timing={0x68, 0x4, {0x8, 0x4}}, @prep={0x83, 0x1f, {{}, 0x1, 0xf, @broadcast, 0x5, @void, 0x8, 0x51c2, @broadcast, 0x7f}}, @perr={0x84, 0x109, {0x2, 0x11, [{{}, @broadcast, 0x1, @void, 0x1c}, {{}, @broadcast, 0x8, @void, 0x3b}, {{}, @device_b, 0x2b, @void, 0x28}, {{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0xe}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x34}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x22}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x3b}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x34}, {{}, @device_b, 0x4f4a895c, @void, 0x6}, {{}, @device_a, 0xa, @void, 0x2c}, {{}, @broadcast, 0x0, @void, 0x2}, {{}, @broadcast, 0x20a0, @void, 0x14}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x29}, {{}, @broadcast, 0xc, @void, 0x2}, {{}, @device_a, 0x778, @void, 0x37}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x2f}, {{}, @device_b, 0x5e, @void, 0x10}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x8e, 0x80, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x1, 0x71, 0xc8}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x40, 0x60}}, @rann={0x7e, 0x15, {{0x0, 0x3b}, 0xc, 0x5, @device_b, 0xfffffffa, 0x9, 0xa}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @random={0x2, 0x51, "92dbfd2a0804b5370fe1fe9335748b8f7d5135509b993899414eadb3614d78fbfa56fac1c12b34f2f9b453786f76264a083e391cbd75ccff78f1694687d96f9744e4d3e406d0e691c6b82300fa81265cca"}, @random_vendor={0xdd, 0x9, "4e83644ecb711ab785"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x50, 0x80, [@ht={0x2d, 0x1a, {0x8000, 0x0, 0x6, 0x0, {0x6, 0x2, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x800, 0x3, 0xf0}}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x10, 0x0, @broadcast, 0x9, 0xedd4, 0x4}}, @mic={0x8c, 0x10, {0x7ab, "166e5460628b", @short="531700cb48c406c5"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ibss={0x6, 0x2, 0xf5}]}, @NL80211_ATTR_FTM_RESPONDER={0x130, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x8c, 0x2, "7b9b0e70aa126563bd8ea22516b3b0a41cb5bae6aa43cf7fffd7e3a96ff33fe2ae5fdb257c7bc4a1f8bb0c16801de7fadd5e901d207dfaa5b00faf5fe29076a4f6d332f223b81aa5fc0f88d2bed2c42cafa5d11a497536feeb5ddfd357275028265b6458fec81f03517a4ee0f9efd23761529d7ca53136867b19595f0f7f705f11484b4c6fc590d2"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9b, 0x3, "04283e2e0e84811464574bfd9ed1d2e33c2c6237aa3de8d006db3454872fb22cdfa747306fd3aeee0785ded72a8acec3e75bb743acb8e704877a52ac43a496f77e12a4fe14f64bb5c37bdc0188b0782f23bb58c7cf8141576c9ca088a7c77bfbffc0a98045564fb9835850f36e2eb036aebb1f4b25711c8e7a426ce53496d5c6e40df1ebea82e0cae66c00b1e99c59085b46d7158bdcc5"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0x844}, 0x1, 0x0, 0x0, 0x4000800}, 0x44041) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r10, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) connect$unix(r11, &(0x7f0000000000)=@file={0x1}, 0x6e) accept(r10, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in, 0x0, 0x32}, @in=@remote, {0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0xca75}, {0x0, 0x6}, 0x0, 0x0, 0x2, 0x4, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}}]}, 0x154}}, 0x200080c0) 1.600526797s ago: executing program 2 (id=564): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000051d000000000000000000007b1af8ff00000000bfa100000000000007010000f8d017a8f93e116b6985b703000000000000d257cf5b49179c69f915ecdc85000000060000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x1}, 0x18) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x24, 0x0, @loopback, 0xa7a}, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$packet(r6, &(0x7f0000000080)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x24020400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.436506339s ago: executing program 0 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x9014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x40000000015, 0x800, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @empty}, 0x10) r7 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r7, 0x200000000114, 0x2715, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x80, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r10}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x80}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) 1.135449214s ago: executing program 0 (id=566): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0xfffffffffffffd32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000010000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe880000000000000000000000000001e000000200000000000000000000000000040000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f0000010000000000000000000000000000000033000000ac14142c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200050052000000000000004c0014"], 0x13c}}, 0x20004080) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000500)='setgroups\x00') pidfd_send_signal(r13, 0xc, &(0x7f0000000540)={0x3b, 0x5, 0x3}, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r15}, 0x18) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r7, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r0, r1, 0x0) accept(r1, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0xfca8464b0d84a7af, 0xb, 0x8, 0xb, 0x14, @local, @empty, 0x10, 0x20, 0x7ff, 0x88a1}}) 958.150276ms ago: executing program 4 (id=567): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007f8af8ff00000000aba200000000000000000000b70400000000000085000000e22dae1157000000950000000000000000bc3b6982ff7a8fc1418bfbc5d2860d8e4b478c3fb01c5c3ede1256e044a6ebc9051e621c29a9cbf3597bf2d726fed639717e55d07a1bb53dbf333ec9ddf7b2bf705e3a3cda76bc424f1be466ce07b87aa6ebe4737ca55c1dec1d00000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) timer_delete(0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[], 0x50) r1 = memfd_secret(0x0) lsm_list_modules(&(0x7f0000000000)=[0x0], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) readv(0xffffffffffffffff, &(0x7f00000017c0)=[{0x0}], 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$VT_DISALLOCATE(r3, 0x5608) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) sendmsg$unix(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x800}, 0x24044090) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) 956.550516ms ago: executing program 5 (id=568): r0 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$eJzs3F1oXFUeAPD/nXz2a5vd7Xa33e5uut1lwxaTNq02D4JUFHxQECuojyFJS23aSJOCLVWmIPVRCr6Lj7764Kv6UsQnwdf6KEihSF/aCuLInbl3vjKTNJNkxpjfD27mnHtn7jnnnnvunHtO5gawbY2mf5JK+E5E7I2IQvMbRisvD+9fn3l0//pMFEulMz8m5Y89SOOZbDexK4uMFSIK7yW1DXUWr167MD0/P3c5i08sXXxrYvHqtSfOD2drpqaS/g4L1SK9tFwPDr67cOjAC2/cemmmuuc8tfpybJTRGG2VlbL/bnRiPbanLtxxvdF16fmfVtdAuf3vjb5YqfKKXcwZsNlKpVJpqP3mYqnZjWVrgC0rhnudA6A38i/69P43X1p1BAY3p/vRc/dOV26A0nI/zJaIf5VX5uMgA033txtpNCJeL/70UbrEJo1DAADU++J03hNs6v+NVGZGfr5y+5n09Q/ZHMpIRPwxIv4UEX+OiH0R8ZeI2B8Rf42IvzXtvy8iSiukP9oUr6ZfnYQq3N2goraU9v+ezua20qU291UNjfRlsT0ReYd57lh2TMZiYOjs+fm54yuk8eVz337Qblt9/y9d0jzkfcEsH3f7mwboZqeXpjsr7XL3bkQc7K+Vv9L/TfojkupMQBIRByLi4Br2O1IXPv//Tw5VIwON71u9/GWllvNoGzDPVPo44n+V+i9GtfzRMImYNMxPXpw+N3du7tLk1NTJE8dPPTX55MRwzM8dm0jPgmMt0/j6m5svt0t/1fJ/9n3zR54/9fmZrGWtX1r/O+vO/8jnb2vlH0kikup87eLa07j53ftt72k6Pf8Hk1fL4fy+9O3ppaXLxyMGkxeXr5+sfTaPp69RrJR/7Ejz+V9Ot3yNy4/E3yMiPYn/ERH/jModYpr3wxHx74g4skL5v3r2P292Xv7NlZZ/NhrLX6n5hvqvzde3CyTZ3GDDpsFIA30XDt951Obi8Xj1f7IcGsvWtL7+JQ2XiHY5zb/t0jW/rPvoAQAAwNZQiIjddWNJu6NQGB+vjAHti52F+YXFpaNnF65cmk23RYzEQCEf6aqMBw8k+fjnSF18sil+Ihs3/rBvRzk+PrMwP9vTkgO7ym0+KYxHvNZX1/5TP2zMEDPwW+b3WrB9rdT+0078/ltdzAzQVY///X/7nU3NCNB1de2/3S/8ix383xewBbj/B2pWf9CPawZsfSVtGba1NbX/ox4CCL8n/fFKNVzoaU6AbtP/h21p1d/1rytQGmq9aTiWvzmGV95hX3SWjR0t0upJIO1Z9ST1HZ18Kn+aQtv3RGFtOxyKxjWDHdbp2XUejeLlxXP7ayd//myRdR7nUva/8htdg592pZ22CnT9UgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALApfg0AAP//XhrXwA==") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0, r1}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x0, 0x2a8, 0x2a8, 0x1b8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5, 0x703}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x6, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x310000, 0x1000, 0x4, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) alarm(0x81) alarm(0x8) membarrier(0x10, 0x0) 852.802788ms ago: executing program 5 (id=569): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000e40)=@delchain={0xe8, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x28}}, @filter_kind_options=@f_flower={{0xb}, {0x7c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_ACT={0x44, 0x3, [@m_ife={0x40, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "7dea7fdc03dc266b4394d770e179d0165e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="003531d0081634a844cb7924d87a8dce5d1a6c9ae88dce733292494dc2900e6759d69221ec8f827bc438bf6a983de5286b648195a809a18b941c6b3d090092180d1746e9c5eae6b9c2992b32ec95bffe226d2ad16124944e105e9d268dfafd74ca934a7dbef224c2293a4798904f162d126d1819febf57d3758306dadf1057fdf9ee584e"], 0x1, 0x55a, &(0x7f0000000b80)="$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") sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r2 = dup(0xffffffffffffffff) write$UHID_INPUT(r2, &(0x7f0000000640)={0xf, {"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", 0x1000}}, 0x1006) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r6 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) 839.671288ms ago: executing program 0 (id=570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x9014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x40000000015, 0x800, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @empty}, 0x10) r7 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r7, 0x200000000114, 0x2715, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tcuTEXE1f9tURHztyxHfTA7Gbe7sri/WatWtvFxp1TcrzZ3d62v1xdXqanVjfn7ujYU3F15fmM1yT9TOUi/zky99/vanv/W7G3++9u12tT73kShEXztOUrfphc626Glvo63TCDYCE3l7CqOuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymsxKP7lU45f6myawfHTiLh6AvFhnN1p9z9vDfr+pfFS53Xw928yT09qeP+X5pGf7/Rzg/qfZw+srT4wxgv3flYZGv9WxAuTg/ufXv+bDIn/8oG1/SvLsoMxvvH13d1h8bMfR8wM/P1JHotVadU3K82d3etr9cXV6mp1Y35+7o2FNxdeX5itrKzVqvnfgTG+97GfPzys/VcGxP/tb7r972Htf2XYSvv8597N+x/qZguD4l97eeDv71QMiZ/mv32fzPPt+TO9/F43v9+LP7374mHtXx6y/Y/6/K8ds/2vfvW7vz/mogDAGWju7K4v1mrVrUMyU8dY5mnM/GLqXFTj/8xk3+l+cuelPu83095bfTSl16pzULF9mezMYk3EOWny/zIj7ZYAAIBT8Ginf9Q1AQAAAAAAAAAAAAAAAAAAgPF1FrcT64+5N5qmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAc6r8BAAD//0wa4Aw=") sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x80, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r10}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x80}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) 572.563632ms ago: executing program 2 (id=571): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="fe4cecb210bc091b10"], 0x53) r7 = syz_open_procfs(0x0, &(0x7f0000000640)='uid_map\x00') readv(r7, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000300)=""/112, 0x103000, 0x6bc22fd484172ea7, 0xc, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) init_module(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 99.525559ms ago: executing program 4 (id=573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) r3 = socket(0x11, 0x800000003, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004d9000000000094f6000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = memfd_create(0x0, 0x5) fsetxattr$security_selinux(r5, &(0x7f0000000480), 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r6, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x800004, &(0x7f0000001b40)={[{@dioread_lock}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@data_err_ignore}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x41}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") setgroups(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x3}}, './file1\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) r9 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) r11 = openat(r10, &(0x7f0000000340)='.\x00', 0x0, 0x0) lseek(r11, 0xfffffffffffffff9, 0x1) 1.157651ms ago: executing program 5 (id=574): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x1e, 0x1, 0x0) recvmsg$inet_nvme(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/129, 0x81}], 0x1}, 0x101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x18) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) lseek(r4, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x97, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x3ff, 0xdf}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, 0x0, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b78, 0x400, 0x1, 0x237}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000a00)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) r9 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) ioctl$FS_IOC_FIEMAP(r9, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="e700000000000000000000000000000000000000020000000100000000aa7900090000000000000085dc000000000000000000000000000000000000001b210000000000000080000000080000"]) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r9, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 3 (id=584): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000080)}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r2 = fsmount(r1, 0x0, 0x0) creat(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) fchdir(r2) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0xa) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r9, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getdents(r8, &(0x7f0000000080)=""/122, 0x7a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x5) kernel console output (not intermixed with test programs): 040883][ T5108] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.054225][ T5121] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.194: mark_inode_dirty error [ 58.070739][ T5108] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.079981][ T5121] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.194: corrupted inode contents [ 58.080256][ T5108] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.098573][ T5108] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.192: Failed to acquire dquot type 1 [ 58.110203][ T5108] EXT4-fs (loop4): 1 truncate cleaned up [ 58.114287][ T5121] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.194: mark_inode_dirty error [ 58.127619][ T5121] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.194: Failed to acquire dquot type 0 [ 58.128965][ T5108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.140795][ T5121] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.194: corrupted inode contents [ 58.155134][ T5126] SELinux: failed to load policy [ 58.183811][ T5121] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.194: mark_inode_dirty error [ 58.195874][ T5121] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.194: corrupted inode contents [ 58.208238][ T5121] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.194: mark_inode_dirty error [ 58.219975][ T5121] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.194: corrupted inode contents [ 58.232975][ T5121] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 58.241824][ T5121] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.194: corrupted inode contents [ 58.254041][ T5121] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.194: mark_inode_dirty error [ 58.265523][ T5121] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 58.275121][ T5121] EXT4-fs (loop1): 1 truncate cleaned up [ 58.282672][ T5121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.296214][ T5121] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.320755][ T5121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.194'. [ 58.330821][ T5121] openvswitch: netlink: Message has 6 unknown bytes. [ 58.350414][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.369307][ T5134] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 58.400547][ T5134] bond1: entered promiscuous mode [ 58.405661][ T5134] bond1: entered allmulticast mode [ 58.411822][ T5134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.425670][ T5169] hub 1-0:1.0: USB hub found [ 58.430569][ T5169] hub 1-0:1.0: 8 ports detected [ 58.625920][ T5184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.199'. [ 58.665111][ T5186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.200'. [ 58.681441][ T5186] loop2: detected capacity change from 0 to 1024 [ 58.700228][ T5186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.712641][ T5186] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.751711][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.898253][ T5197] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 59.149973][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.420865][ T5209] loop3: detected capacity change from 0 to 2048 [ 59.472787][ T5209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.665062][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 59.688134][ T5218] openvswitch: netlink: Message has 6 unknown bytes. [ 59.893287][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.996843][ T5236] loop4: detected capacity change from 0 to 512 [ 60.071057][ T5236] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.100338][ T5236] EXT4-fs (loop4): orphan cleanup on readonly fs [ 60.107886][ T5236] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.210: bg 0: block 248: padding at end of block bitmap is not set [ 60.123977][ T5236] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.210: Failed to acquire dquot type 1 [ 60.136377][ T5236] EXT4-fs (loop4): 1 truncate cleaned up [ 60.159559][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 60.268710][ T5237] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 60.946833][ T10] Process accounting resumed [ 61.062337][ T5260] pim6reg: entered allmulticast mode [ 61.078615][ T5260] pim6reg: left allmulticast mode [ 61.134530][ T5260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.214'. [ 61.165830][ T5268] syz.3.216 (5268): attempted to duplicate a private mapping with mremap. This is not supported. [ 61.180885][ T5269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'. [ 61.202837][ T5269] loop2: detected capacity change from 0 to 512 [ 61.211268][ T5269] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.218109][ T5269] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.230373][ T5269] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 61.238947][ T5269] System zones: 1-12 [ 61.243619][ T5269] EXT4-fs (loop2): 1 truncate cleaned up [ 61.491057][ T29] kauditd_printk_skb: 454 callbacks suppressed [ 61.491072][ T29] audit: type=1326 audit(1749061693.093:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 61.575287][ T29] audit: type=1326 audit(1749061693.093:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 61.670365][ T29] audit: type=1326 audit(1749061693.213:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa6f6e929 code=0x7ffc0000 [ 61.693804][ T29] audit: type=1326 audit(1749061693.213:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa6f6e929 code=0x7ffc0000 [ 61.717217][ T29] audit: type=1326 audit(1749061693.213:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafa6f6e929 code=0x7ffc0000 [ 61.740602][ T29] audit: type=1326 audit(1749061693.213:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa6f6e929 code=0x7ffc0000 [ 61.764315][ T29] audit: type=1326 audit(1749061693.213:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafa6f6e929 code=0x7ffc0000 [ 61.787865][ T29] audit: type=1326 audit(1749061693.213:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa6f6e929 code=0x7ffc0000 [ 61.811240][ T29] audit: type=1326 audit(1749061693.213:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafa6f6e929 code=0x7ffc0000 [ 61.834573][ T29] audit: type=1326 audit(1749061693.213:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa6f6e929 code=0x7ffc0000 [ 61.879739][ T5295] openvswitch: netlink: Message has 6 unknown bytes. [ 61.898257][ T5301] loop4: detected capacity change from 0 to 2048 [ 62.121414][ T5322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.129377][ T5322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.136904][ T5322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.667809][ T5346] lo speed is unknown, defaulting to 1000 [ 62.673871][ T5346] dummy0 speed is unknown, defaulting to 1000 [ 62.680353][ T5346] lo speed is unknown, defaulting to 1000 [ 62.926036][ T5346] loop4: detected capacity change from 0 to 2048 [ 63.038086][ T5384] __nla_validate_parse: 5 callbacks suppressed [ 63.038106][ T5384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 64.012358][ T5528] netlink: 'syz.0.234': attribute type 4 has an invalid length. [ 64.022837][ T3391] lo speed is unknown, defaulting to 1000 [ 64.028725][ T3391] sz0: Port: 1 Link DOWN [ 64.078825][ T5529] netlink: 'syz.0.234': attribute type 4 has an invalid length. [ 64.089617][ T3453] lo speed is unknown, defaulting to 1000 [ 64.095404][ T3453] sz0: Port: 1 Link ACTIVE [ 64.175964][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 64.207829][ T5539] syzkaller1: entered promiscuous mode [ 64.213510][ T5539] syzkaller1: entered allmulticast mode [ 64.233839][ T5547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 64.242743][ T5547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 64.251871][ T5547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 64.262128][ T5547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 64.271115][ T5547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 64.281350][ T5547] hub 9-0:1.0: USB hub found [ 64.286143][ T5547] hub 9-0:1.0: 8 ports detected [ 64.383055][ T5557] Cannot find add_set index 3 as target [ 64.459064][ T5569] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 65.560084][ T5693] loop2: detected capacity change from 0 to 164 [ 65.569564][ T5693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 65.600722][ T5698] sd 0:0:1:0: device reset [ 65.621256][ T5698] loop2: detected capacity change from 0 to 1764 [ 65.628275][ T5698] iso9660: Unknown parameter 'mapacorn' [ 65.640934][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 65.706794][ T5703] lo speed is unknown, defaulting to 1000 [ 65.712887][ T5703] dummy0 speed is unknown, defaulting to 1000 [ 65.719488][ T5703] lo speed is unknown, defaulting to 1000 [ 65.752052][ T5707] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 65.759888][ T5707] netlink: 224 bytes leftover after parsing attributes in process `syz.2.246'. [ 65.887576][ T5751] loop2: detected capacity change from 0 to 512 [ 65.894753][ T5751] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.902282][ T5751] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.911430][ T5751] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 65.921507][ T5751] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 65.930530][ T5751] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102] [ 65.938606][ T5751] System zones: 0-2, 18-18, 34-34 [ 65.943946][ T5751] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.248: iget: bad i_size value: 360287970189639680 [ 65.957518][ T5751] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.248: couldn't read orphan inode 15 (err -117) [ 65.975239][ T5751] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.248: iget: bad i_size value: 360287970189639680 [ 65.991597][ T5751] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 3: comm syz.2.248: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 66.106261][ T5759] syzkaller1: entered promiscuous mode [ 66.111838][ T5759] syzkaller1: entered allmulticast mode [ 66.210321][ T5772] loop2: detected capacity change from 0 to 512 [ 66.224335][ T5778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.229032][ T5772] EXT4-fs: dax option not supported [ 66.238407][ T5778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.252458][ T5777] sch_tbf: burst 7710 is lower than device lo mtu (65550) ! [ 66.258931][ T5772] loop2: detected capacity change from 0 to 128 [ 66.279991][ T5777] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 66.384987][ T5791] siw: device registration error -23 [ 66.400497][ T3391] IPVS: starting estimator thread 0... [ 66.498648][ T5794] IPVS: using max 2352 ests per chain, 117600 per kthread [ 66.677492][ T29] kauditd_printk_skb: 1062 callbacks suppressed [ 66.677581][ T29] audit: type=1400 audit(1749061698.273:5676): avc: denied { remove_name } for pid=3320 comm="syz-executor" name="binderfs" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 66.694263][ T5800] netlink: 'syz.2.256': attribute type 1 has an invalid length. [ 66.719555][ T29] audit: type=1400 audit(1749061698.273:5677): avc: denied { rmdir } for pid=3320 comm="syz-executor" name="48" dev="tmpfs" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 66.810060][ T5805] team_slave_1 (unregistering): left promiscuous mode [ 66.816900][ T5805] team_slave_1 (unregistering): left allmulticast mode [ 66.840125][ T5805] team0: Port device team_slave_1 removed [ 66.861546][ T29] audit: type=1400 audit(1749061698.463:5678): avc: denied { write } for pid=5799 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 66.861750][ T5800] netlink: 'syz.2.256': attribute type 7 has an invalid length. [ 67.009026][ T29] audit: type=1326 audit(1749061698.603:5679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5814 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45437ce929 code=0x7ffc0000 [ 67.019664][ T5815] loop2: detected capacity change from 0 to 2048 [ 67.032532][ T29] audit: type=1326 audit(1749061698.603:5680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5814 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45437ce929 code=0x7ffc0000 [ 67.062128][ T29] audit: type=1326 audit(1749061698.603:5681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5814 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f45437ce929 code=0x7ffc0000 [ 67.085576][ T29] audit: type=1326 audit(1749061698.603:5682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5814 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45437ce929 code=0x7ffc0000 [ 67.109108][ T29] audit: type=1326 audit(1749061698.603:5683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5814 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45437ce929 code=0x7ffc0000 [ 67.132535][ T29] audit: type=1326 audit(1749061698.613:5684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5814 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45437ce929 code=0x7ffc0000 [ 67.156002][ T29] audit: type=1326 audit(1749061698.613:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5814 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45437ce929 code=0x7ffc0000 [ 67.181366][ T5815] EXT4-fs mount: 10 callbacks suppressed [ 67.181397][ T5815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.219863][ T5815] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.257: iget: bogus i_mode (4355) [ 67.232628][ T5815] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.257: iget: bogus i_mode (4355) [ 67.264196][ T5821] block device autoloading is deprecated and will be removed. [ 67.272454][ T5821] syz.3.258: attempt to access beyond end of device [ 67.272454][ T5821] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 67.312016][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.452630][ T5838] loop4: detected capacity change from 0 to 2048 [ 67.459531][ T5838] EXT4-fs: Ignoring removed bh option [ 67.465477][ T5838] EXT4-fs: Mount option(s) incompatible with ext2 [ 67.545949][ T5843] lo speed is unknown, defaulting to 1000 [ 67.552513][ T5843] dummy0 speed is unknown, defaulting to 1000 [ 67.559411][ T5843] lo speed is unknown, defaulting to 1000 [ 67.830786][ T5867] netlink: 'syz.4.261': attribute type 15 has an invalid length. [ 67.998605][ T2970] usb 6-1: device descriptor read/8, error -110 [ 68.170270][ T5873] __nla_validate_parse: 5 callbacks suppressed [ 68.170287][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 68.247443][ T5873] bond0: (slave bond_slave_0): Releasing backup interface [ 68.254711][ T2970] usb 6-1: SetAddress Request (3) to port 0 [ 68.261170][ T2970] usb 6-1: new SuperSpeed USB device number 3 using vhci_hcd [ 68.269211][ T5873] bond0: (slave bond_slave_1): Releasing backup interface [ 68.281743][ T5873] team0: Port device team_slave_0 removed [ 68.299846][ T5873] team0: Port device team_slave_1 removed [ 68.306606][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.314082][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.327093][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.334755][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.379138][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'. [ 68.411323][ T5877] tipc: Started in network mode [ 68.416373][ T5877] tipc: Node identity e25ce8e42e5a, cluster identity 4711 [ 68.423628][ T5877] tipc: Enabled bearer , priority 0 [ 68.438312][ T5885] loop3: detected capacity change from 0 to 1024 [ 68.450320][ T5885] EXT4-fs: Ignoring removed nobh option [ 68.454972][ T5878] syzkaller1: entered promiscuous mode [ 68.456023][ T5885] EXT4-fs: Ignoring removed bh option [ 68.461380][ T5878] syzkaller1: entered allmulticast mode [ 68.489913][ T5885] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 68.514935][ T5885] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 68.571863][ T5894] siw: device registration error -23 [ 68.571911][ T5875] tipc: Resetting bearer [ 68.602731][ T5875] tipc: Disabling bearer [ 68.636659][ T5904] loop4: detected capacity change from 0 to 128 [ 68.651070][ T5904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.659790][ T5904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.676145][ T3390] hid-generic 0000:0000:8000.0002: unknown main item tag 0x0 [ 68.684042][ T3390] hid-generic 0000:0000:8000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 69.254977][ T5932] process 'syz.4.270' launched '/dev/fd/6' with NULL argv: empty string added [ 69.489879][ T5945] loop3: detected capacity change from 0 to 2048 [ 69.514488][ T5945] loop3: p3 < > p4 < > [ 69.518780][ T5945] loop3: partition table partially beyond EOD, truncated [ 69.526598][ T5945] loop3: p3 start 4284289 is beyond EOD, truncated [ 69.535879][ T5948] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 69.562517][ T5948] netlink: 4 bytes leftover after parsing attributes in process `GPL'. [ 69.693861][ T5955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.272'. [ 70.148779][ T5972] netlink: 'syz.4.278': attribute type 4 has an invalid length. [ 70.156704][ T5972] netlink: 17 bytes leftover after parsing attributes in process `syz.4.278'. [ 70.182506][ T5972] netlink: 56 bytes leftover after parsing attributes in process `syz.4.278'. [ 70.345942][ T5981] lo speed is unknown, defaulting to 1000 [ 70.352260][ T5981] dummy0 speed is unknown, defaulting to 1000 [ 70.360101][ T5981] lo speed is unknown, defaulting to 1000 [ 70.633525][ T6006] lo speed is unknown, defaulting to 1000 [ 70.647627][ T6006] dummy0 speed is unknown, defaulting to 1000 [ 70.667996][ T6006] lo speed is unknown, defaulting to 1000 [ 70.725122][ T6016] futex_wake_op: syz.2.281 tries to shift op by -1; fix this program [ 70.759457][ T6016] SELinux: failed to load policy [ 70.790503][ T6016] netlink: 'syz.2.281': attribute type 15 has an invalid length. [ 70.831262][ T6016] pimreg: entered allmulticast mode [ 70.848639][ T6016] pimreg: left allmulticast mode [ 70.988043][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 71.011569][ T6042] loop0: detected capacity change from 0 to 512 [ 71.028541][ T6042] EXT4-fs: Ignoring removed nobh option [ 71.060720][ T6042] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.282: corrupted inode contents [ 71.093268][ T6042] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.282: mark_inode_dirty error [ 71.135365][ T6042] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.282: corrupted inode contents [ 71.160994][ T6050] loop2: detected capacity change from 0 to 512 [ 71.175318][ T6042] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.282: mark_inode_dirty error [ 71.188346][ T6050] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.200329][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'. [ 71.209832][ T6042] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.282: Failed to acquire dquot type 0 [ 71.211259][ T6050] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 71.233117][ T6042] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.282: corrupted inode contents [ 71.233415][ T6052] loop4: detected capacity change from 0 to 512 [ 71.259652][ T6052] EXT4-fs: Ignoring removed nobh option [ 71.268593][ T6042] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.282: mark_inode_dirty error [ 71.291637][ T6052] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.285: corrupted inode contents [ 71.302443][ T6042] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.282: corrupted inode contents [ 71.313979][ T6052] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm syz.4.285: mark_inode_dirty error [ 71.326439][ T6060] loop2: detected capacity change from 0 to 736 [ 71.333363][ T6042] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.282: mark_inode_dirty error [ 71.372524][ T6042] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.282: corrupted inode contents [ 71.372637][ T6052] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.285: corrupted inode contents [ 71.398733][ T6042] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 71.403599][ T6052] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.285: mark_inode_dirty error [ 71.421415][ T6052] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.285: Failed to acquire dquot type 0 [ 71.429447][ T6042] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.282: corrupted inode contents [ 71.435480][ T6052] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.285: corrupted inode contents [ 71.457333][ T6052] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.285: mark_inode_dirty error [ 71.461203][ T6042] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.282: mark_inode_dirty error [ 71.470854][ T6052] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.285: corrupted inode contents [ 71.492416][ T6052] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.285: mark_inode_dirty error [ 71.497688][ T6042] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 71.506342][ T6052] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.285: corrupted inode contents [ 71.527233][ T6052] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 71.536451][ T6042] EXT4-fs (loop0): 1 truncate cleaned up [ 71.536676][ T6052] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.285: corrupted inode contents [ 71.544004][ T6042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.561044][ T6052] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.285: mark_inode_dirty error [ 71.577712][ T6052] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 71.578186][ T6065] tipc: Started in network mode [ 71.587217][ T6052] EXT4-fs (loop4): 1 truncate cleaned up [ 71.591665][ T6065] tipc: Node identity 2a16c95e1181, cluster identity 4711 [ 71.599083][ T6052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.604417][ T6065] tipc: Enabled bearer , priority 0 [ 71.618084][ T6052] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.624463][ T6042] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.652223][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.285'. [ 71.652365][ T6042] openvswitch: netlink: Message has 6 unknown bytes. [ 71.662115][ T6052] openvswitch: netlink: Message has 6 unknown bytes. [ 71.691919][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.692504][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.710304][ T6064] tipc: Resetting bearer [ 71.737119][ T6064] tipc: Disabling bearer [ 71.788831][ T6084] loop3: detected capacity change from 0 to 1024 [ 71.800678][ T6084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.816523][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 71.816535][ T29] audit: type=1400 audit(1749061703.413:5909): avc: denied { read write open } for pid=6083 comm="syz.3.289" path="/64/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.847853][ T29] audit: type=1400 audit(1749061703.453:5910): avc: denied { ioctl } for pid=6083 comm="syz.3.289" path="socket:[7945]" dev="sockfs" ino=7945 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.875368][ T29] audit: type=1400 audit(1749061703.453:5911): avc: denied { search } for pid=6093 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.897575][ T29] audit: type=1400 audit(1749061703.453:5912): avc: denied { search } for pid=6093 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.920306][ T29] audit: type=1400 audit(1749061703.453:5913): avc: denied { search } for pid=6093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.943505][ T29] audit: type=1400 audit(1749061703.453:5914): avc: denied { search } for pid=6093 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.966772][ T29] audit: type=1400 audit(1749061703.453:5915): avc: denied { read open } for pid=6094 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.992303][ T29] audit: type=1400 audit(1749061703.453:5916): avc: denied { getattr } for pid=6094 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.017552][ T29] audit: type=1400 audit(1749061703.453:5917): avc: denied { getattr } for pid=6094 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.081337][ T29] audit: type=1400 audit(1749061703.623:5918): avc: denied { read } for pid=6096 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.160041][ T6110] loop4: detected capacity change from 0 to 2048 [ 72.302044][ T6110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.751173][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.795236][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'. [ 72.796318][ T6122] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 72.809933][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.869287][ T6141] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 72.884892][ T6143] netlink: 'syz.4.297': attribute type 6 has an invalid length. [ 72.905986][ T6145] loop0: detected capacity change from 0 to 512 [ 72.912784][ T6145] EXT4-fs: Ignoring removed nobh option [ 72.930901][ T6145] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.298: corrupted inode contents [ 72.943766][ T6145] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.298: mark_inode_dirty error [ 72.957087][ T6145] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.298: corrupted inode contents [ 72.981802][ T6145] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.298: mark_inode_dirty error [ 72.998714][ T6145] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.298: Failed to acquire dquot type 0 [ 73.013977][ T6150] loop3: detected capacity change from 0 to 512 [ 73.022597][ T6145] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.298: corrupted inode contents [ 73.034890][ T6150] EXT4-fs: Ignoring removed nobh option [ 73.036031][ T6152] loop4: detected capacity change from 0 to 512 [ 73.047251][ T6145] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.298: mark_inode_dirty error [ 73.055752][ T6154] loop2: detected capacity change from 0 to 512 [ 73.059202][ T6145] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.298: corrupted inode contents [ 73.077312][ T6154] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.078617][ T6145] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.298: mark_inode_dirty error [ 73.089410][ T6150] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.299: corrupted inode contents [ 73.099733][ T6145] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.298: corrupted inode contents [ 73.111861][ T6150] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.299: mark_inode_dirty error [ 73.122711][ T6154] EXT4-fs (loop2): 1 truncate cleaned up [ 73.134598][ T6145] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 73.140453][ T6154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.147572][ T6150] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.299: corrupted inode contents [ 73.160037][ T6152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.185233][ T6145] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.298: corrupted inode contents [ 73.185296][ T6152] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.208818][ T6150] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.299: mark_inode_dirty error [ 73.208819][ T6145] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.298: mark_inode_dirty error [ 73.231601][ T6152] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1768647778) [ 73.231864][ T6145] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 73.241968][ T6152] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 73.269257][ T6150] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.299: Failed to acquire dquot type 0 [ 73.283275][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.294775][ T6145] EXT4-fs (loop0): 1 truncate cleaned up [ 73.300957][ T6145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.315493][ T6150] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.299: corrupted inode contents [ 73.327605][ T6145] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.339411][ T6150] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.299: mark_inode_dirty error [ 73.356655][ T2970] usb 6-1: device descriptor read/8, error -110 [ 73.363040][ T6145] __nla_validate_parse: 5 callbacks suppressed [ 73.363106][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'. [ 73.378513][ T6150] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.299: corrupted inode contents [ 73.390776][ T6145] openvswitch: netlink: Message has 6 unknown bytes. [ 73.397881][ T6150] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.299: mark_inode_dirty error [ 73.422066][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.434003][ T6150] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.299: corrupted inode contents [ 73.451743][ T6150] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 73.469535][ T2970] usb 6-1: new SuperSpeed USB device number 3 using vhci_hcd [ 73.479262][ T6150] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.299: corrupted inode contents [ 73.497021][ T6150] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.299: mark_inode_dirty error [ 73.512743][ T6150] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 73.522505][ T6150] EXT4-fs (loop3): 1 truncate cleaned up [ 73.529825][ T6150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.542765][ T6150] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.561344][ T6150] openvswitch: netlink: Message has 6 unknown bytes. [ 73.580194][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.617019][ T6185] loop3: detected capacity change from 0 to 2048 [ 73.637143][ T6185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.747980][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.780077][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.808398][ T6197] loop4: detected capacity change from 0 to 8192 [ 73.829293][ T6201] delete_channel: no stack [ 74.038745][ T6214] loop3: detected capacity change from 0 to 512 [ 74.059286][ T6214] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.071630][ T6214] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.101556][ T6214] EXT4-fs (loop3): 1 truncate cleaned up [ 74.117741][ T6214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.205594][ T6214] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 74.212311][ T6214] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.220334][ T6214] vhci_hcd vhci_hcd.0: Device attached [ 74.234519][ T6222] IPv6: Can't replace route, no match found [ 74.242263][ T6222] 9pnet_fd: Insufficient options for proto=fd [ 74.259708][ T6224] xt_hashlimit: max too large, truncated to 1048576 [ 74.260170][ T6220] vhci_hcd: connection closed [ 74.266830][ T3593] vhci_hcd: stop threads [ 74.275935][ T3593] vhci_hcd: release socket [ 74.280374][ T3593] vhci_hcd: disconnect device [ 74.375149][ T6232] SELinux: Context is not valid (left unmapped). [ 74.426231][ T6232] siw: device registration error -23 [ 74.459532][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 74.615324][ T6240] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 74.651606][ T6240] netlink: 88 bytes leftover after parsing attributes in process `syz.2.311'. [ 74.780341][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.924095][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'. [ 74.945354][ T6256] loop3: detected capacity change from 0 to 512 [ 74.953397][ T6256] EXT4-fs: Ignoring removed nobh option [ 74.982784][ T6256] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.314: corrupted inode contents [ 75.010100][ T6256] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.314: mark_inode_dirty error [ 75.033781][ T6256] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.314: corrupted inode contents [ 75.062789][ T6256] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.314: mark_inode_dirty error [ 75.075544][ T6256] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.314: Failed to acquire dquot type 0 [ 75.087436][ T6256] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.314: corrupted inode contents [ 75.101813][ T6256] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.314: mark_inode_dirty error [ 75.113572][ T6256] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.314: corrupted inode contents [ 75.126812][ T6256] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.314: mark_inode_dirty error [ 75.138215][ T6256] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.314: corrupted inode contents [ 75.151580][ T6256] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 75.160432][ T6256] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.314: corrupted inode contents [ 75.173614][ T6256] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.314: mark_inode_dirty error [ 75.184812][ T6256] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 75.195399][ T6256] EXT4-fs (loop3): 1 truncate cleaned up [ 75.201691][ T6256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.214424][ T6256] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.226416][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.314'. [ 75.237244][ T6256] openvswitch: netlink: Message has 6 unknown bytes. [ 75.257173][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.275840][ T6263] loop2: detected capacity change from 0 to 164 [ 75.304736][ T6263] netlink: 'syz.2.325': attribute type 39 has an invalid length. [ 75.325143][ T6230] vhci_hcd: invalid port number 255 [ 75.331550][ T6230] vhci_hcd: invalid port number 255 [ 75.494755][ T6276] loop2: detected capacity change from 0 to 2048 [ 75.510188][ T6276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.554672][ T6281] netlink: '+}[@': attribute type 10 has an invalid length. [ 75.649123][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.163922][ T6299] loop3: detected capacity change from 0 to 2048 [ 76.226353][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.235877][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.459055][ T6311] netlink: 'syz.0.323': attribute type 4 has an invalid length. [ 76.469499][ T1054] lo speed is unknown, defaulting to 1000 [ 76.475271][ T1054] sz0: Port: 1 Link DOWN [ 76.692012][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 76.818919][ T29] kauditd_printk_skb: 595 callbacks suppressed [ 76.818938][ T29] audit: type=1326 audit(1749061708.423:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 76.849281][ T29] audit: type=1326 audit(1749061708.423:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 76.872684][ T29] audit: type=1326 audit(1749061708.423:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 76.896109][ T29] audit: type=1326 audit(1749061708.423:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 76.919491][ T29] audit: type=1326 audit(1749061708.423:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 76.942796][ T29] audit: type=1326 audit(1749061708.423:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 76.966132][ T29] audit: type=1326 audit(1749061708.423:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f424db9e963 code=0x7ffc0000 [ 76.989292][ T29] audit: type=1326 audit(1749061708.423:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f424db9e963 code=0x7ffc0000 [ 77.012521][ T29] audit: type=1326 audit(1749061708.423:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 77.035944][ T29] audit: type=1326 audit(1749061708.423:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 77.438006][ T6335] loop2: detected capacity change from 0 to 512 [ 77.446139][ T6335] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.459616][ T6335] EXT4-fs (loop2): 1 truncate cleaned up [ 77.465884][ T6335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.505154][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.574367][ T6366] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 78.634268][ T6359] lo speed is unknown, defaulting to 1000 [ 78.634699][ T6359] dummy0 speed is unknown, defaulting to 1000 [ 78.635193][ T6359] lo speed is unknown, defaulting to 1000 [ 78.757204][ T6359] chnl_net:caif_netlink_parms(): no params data found [ 78.815178][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.822386][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.829964][ T6359] bridge_slave_0: entered allmulticast mode [ 78.837056][ T6359] bridge_slave_0: entered promiscuous mode [ 78.845529][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.853368][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.860766][ T6359] bridge_slave_1: entered allmulticast mode [ 78.867872][ T6359] bridge_slave_1: entered promiscuous mode [ 78.898056][ T6359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.909465][ T6359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.944898][ T6359] team0: Port device team_slave_0 added [ 78.952963][ T6359] team0: Port device team_slave_1 added [ 78.986022][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.993171][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.019359][ T6359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.031683][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.038827][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.065251][ T6359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.106644][ T6359] hsr_slave_0: entered promiscuous mode [ 79.113691][ T6359] hsr_slave_1: entered promiscuous mode [ 79.119616][ T6359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.127180][ T6359] Cannot create hsr debugfs directory [ 79.315290][ T6359] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.337561][ T6359] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.359797][ T6359] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.367418][ T6702] loop3: detected capacity change from 0 to 2048 [ 79.376208][ T6359] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.383506][ T6702] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.401968][ T6702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.411937][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.421143][ T6359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.428518][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.435607][ T6359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.441316][ T6702] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.337: bg 0: block 234: padding at end of block bitmap is not set [ 79.466537][ T6359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.479313][ T6702] EXT4-fs (loop3): Remounting filesystem read-only [ 79.480729][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.497262][ T6707] loop4: detected capacity change from 0 to 8192 [ 79.531172][ T6711] xt_hashlimit: size too large, truncated to 1048576 [ 79.537901][ T6711] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 79.550972][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.575549][ T6359] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.610009][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.617185][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.631118][ T6717] random: crng reseeded on system resumption [ 79.657968][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.665099][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.814745][ T6359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.056375][ T6359] veth0_vlan: entered promiscuous mode [ 80.074262][ T6359] veth1_vlan: entered promiscuous mode [ 80.111016][ T6359] veth0_macvtap: entered promiscuous mode [ 80.131700][ T6359] veth1_macvtap: entered promiscuous mode [ 80.155559][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.179445][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.202142][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.204801][ T6359] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.219904][ T6359] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.228737][ T6359] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.237534][ T6359] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.286521][ T6744] openvswitch: netlink: Message has 6 unknown bytes. [ 80.299913][ T6744] netlink: 10 bytes leftover after parsing attributes in process `syz.3.342'. [ 80.414671][ T6748] ALSA: seq fatal error: cannot create timer (-19) [ 80.428901][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.332'. [ 80.430157][ T6759] IPv6: Can't replace route, no match found [ 80.516723][ T6763] loop4: detected capacity change from 0 to 4096 [ 80.526854][ T6763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.729573][ T6763] lo speed is unknown, defaulting to 1000 [ 80.735696][ T6763] dummy0 speed is unknown, defaulting to 1000 [ 80.742283][ T6763] lo speed is unknown, defaulting to 1000 [ 81.080905][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.210894][ T6822] loop4: detected capacity change from 0 to 512 [ 81.242524][ T6822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.276824][ T6827] netlink: 'syz.2.353': attribute type 27 has an invalid length. [ 81.287186][ T6822] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.317468][ T6822] EXT4-fs: Ignoring removed orlov option [ 81.323500][ T6822] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.332663][ T6833] 9pnet_virtio: no channels available for device [ 81.333241][ T6822] EXT4-fs (loop4): can't enable nombcache during remount [ 81.401708][ T6827] bridge0: port 3(team0) entered disabled state [ 81.401839][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.408099][ T6827] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.423720][ T6827] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.435035][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.572326][ T6827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.608631][ T6827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.662836][ T6827] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.671482][ T6827] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.679924][ T6827] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.688287][ T6827] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.742963][ T6827] veth3: left promiscuous mode [ 81.747800][ T6827] veth3: left allmulticast mode [ 81.896942][ T6847] netlink: 'syz.5.355': attribute type 4 has an invalid length. [ 81.924925][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 81.924942][ T29] audit: type=1400 audit(1749061713.523:6903): avc: denied { bind } for pid=6846 comm="syz.5.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.975633][ T29] audit: type=1400 audit(1749061713.563:6904): avc: denied { setopt } for pid=6846 comm="syz.5.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.996310][ T29] audit: type=1400 audit(1749061713.563:6905): avc: denied { mount } for pid=6846 comm="syz.5.355" name="/" dev="hugetlbfs" ino=9587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 82.055371][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.356'. [ 82.081023][ T6338] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 82.095733][ T29] audit: type=1400 audit(1749061713.673:6906): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 82.116046][ T29] audit: type=1326 audit(1749061713.683:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45437ce929 code=0x7ffc0000 [ 82.139438][ T29] audit: type=1326 audit(1749061713.683:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45437ce929 code=0x7ffc0000 [ 82.162838][ T29] audit: type=1326 audit(1749061713.683:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45437ce929 code=0x7ffc0000 [ 82.166176][ T6849] netlink: 28 bytes leftover after parsing attributes in process `syz.5.356'. [ 82.186187][ T29] audit: type=1326 audit(1749061713.683:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45437ce929 code=0x7ffc0000 [ 82.218554][ T29] audit: type=1326 audit(1749061713.683:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45437ce929 code=0x7ffc0000 [ 82.241895][ T29] audit: type=1326 audit(1749061713.683:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6850 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45437ce929 code=0x7ffc0000 [ 82.249466][ T6857] openvswitch: netlink: Message has 6 unknown bytes. [ 82.286230][ T6852] lo speed is unknown, defaulting to 1000 [ 82.292683][ T6852] dummy0 speed is unknown, defaulting to 1000 [ 82.299141][ T6852] lo speed is unknown, defaulting to 1000 [ 82.345782][ T6859] loop2: detected capacity change from 0 to 2048 [ 82.407675][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.422924][ T6859] loop2: p1 < > p4 [ 82.427793][ T6859] loop2: p4 size 8388608 extends beyond EOD, truncated [ 82.472810][ T6889] pimreg3: entered allmulticast mode [ 82.487231][ T6889] syz.5.360 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 82.509383][ T6881] pimreg3: left allmulticast mode [ 82.581196][ T6904] 9p: Unknown Cache mode or invalid value mm [ 82.590848][ T6906] random: crng reseeded on system resumption [ 82.638231][ T6890] loop4: detected capacity change from 0 to 128 [ 82.708384][ T6911] loop2: detected capacity change from 0 to 512 [ 82.727759][ T6911] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.362: bad orphan inode 11 [ 82.747341][ T6911] ext4_test_bit(bit=10, block=4) = 1 [ 82.752792][ T6911] is_bad_inode(inode)=0 [ 82.757034][ T6911] NEXT_ORPHAN(inode)=2080374784 [ 82.761911][ T6911] max_ino=32 [ 82.765110][ T6911] i_nlink=0 [ 82.768430][ T6890] syz.4.359: attempt to access beyond end of device [ 82.768430][ T6890] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 82.773267][ T6911] EXT4-fs (loop2): 1 truncate cleaned up [ 82.793064][ T6890] syz.4.359: attempt to access beyond end of device [ 82.793064][ T6890] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 82.800574][ T6911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.807266][ T6890] syz.4.359: attempt to access beyond end of device [ 82.807266][ T6890] loop4: rw=0, sector=161, nr_sectors = 8 limit=128 [ 82.835574][ T6890] syz.4.359: attempt to access beyond end of device [ 82.835574][ T6890] loop4: rw=0, sector=161, nr_sectors = 8 limit=128 [ 83.042027][ T6904] Set syz1 is full, maxelem 65536 reached [ 83.435416][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.462397][ T6929] loop2: detected capacity change from 0 to 2048 [ 83.490323][ T6929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.603042][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.625067][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 83.636708][ T6940] loop2: detected capacity change from 0 to 512 [ 83.643586][ T6940] EXT4-fs: Ignoring removed nobh option [ 83.659877][ T6940] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.367: corrupted inode contents [ 83.671860][ T6940] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.367: mark_inode_dirty error [ 83.683429][ T6940] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.367: corrupted inode contents [ 83.695335][ T6940] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.367: mark_inode_dirty error [ 83.706849][ T6940] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.367: Failed to acquire dquot type 0 [ 83.718830][ T6940] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.367: corrupted inode contents [ 83.731787][ T6940] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.367: mark_inode_dirty error [ 83.744826][ T6940] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.367: corrupted inode contents [ 83.757395][ T6940] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.367: mark_inode_dirty error [ 83.770439][ T6940] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.367: corrupted inode contents [ 83.782436][ T6940] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 83.786559][ T6945] loop4: detected capacity change from 0 to 2048 [ 83.791165][ T6940] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.367: corrupted inode contents [ 83.809699][ T6940] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.367: mark_inode_dirty error [ 83.821072][ T6940] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 83.830877][ T6940] EXT4-fs (loop2): 1 truncate cleaned up [ 83.832302][ T6945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.837168][ T6940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.848617][ T6945] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.863875][ T6940] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.917233][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 83.934279][ T6940] openvswitch: netlink: Message has 6 unknown bytes. [ 83.959122][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.990832][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.370'. [ 84.004428][ T6959] loop2: detected capacity change from 0 to 512 [ 84.011756][ T6959] EXT4-fs: Ignoring removed nobh option [ 84.034082][ T6959] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.370: corrupted inode contents [ 84.057439][ T6959] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.370: mark_inode_dirty error [ 84.082961][ T6959] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.370: corrupted inode contents [ 84.109523][ T6964] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 84.128615][ T6959] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.370: mark_inode_dirty error [ 84.152190][ T6959] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.370: Failed to acquire dquot type 0 [ 84.179774][ T6959] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.370: corrupted inode contents [ 84.228725][ T6959] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.370: mark_inode_dirty error [ 84.255022][ T6959] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.370: corrupted inode contents [ 84.276723][ T6959] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.370: mark_inode_dirty error [ 84.317504][ T6959] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.370: corrupted inode contents [ 84.333450][ T31] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 84.348215][ T6959] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 84.358882][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 76 with error 117 [ 84.371585][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 84.371585][ T31] [ 84.383747][ T6959] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.370: corrupted inode contents [ 84.416160][ T6971] netlink: 52 bytes leftover after parsing attributes in process `syz.3.371'. [ 84.432557][ T6971] xt_hashlimit: max too large, truncated to 1048576 [ 84.438490][ T6959] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.370: mark_inode_dirty error [ 84.463620][ T6975] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 92 with max blocks 1 with error 117 [ 84.476086][ T6975] EXT4-fs (loop4): This should not happen!! Data will be lost [ 84.476086][ T6975] [ 84.503973][ T6959] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 84.524399][ T6959] EXT4-fs (loop2): 1 truncate cleaned up [ 84.541946][ T6959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.570250][ T6959] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.584875][ T6959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.370'. [ 84.595258][ T6959] openvswitch: netlink: Message has 6 unknown bytes. [ 84.631725][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.820816][ T6960] Cannot find add_set index 3 as target [ 84.847887][ T6945] syz.4.368 (6945) used greatest stack depth: 6952 bytes left [ 84.856165][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.878039][ T6987] netlink: 'syz.0.375': attribute type 21 has an invalid length. [ 84.886224][ T6987] netlink: 'syz.0.375': attribute type 1 has an invalid length. [ 84.894015][ T6987] netlink: 144 bytes leftover after parsing attributes in process `syz.0.375'. [ 85.124045][ T7000] loop3: detected capacity change from 0 to 2048 [ 85.161149][ T7000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.416819][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.433643][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 85.444840][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.383'. [ 85.460727][ T7025] netlink: 28 bytes leftover after parsing attributes in process `syz.5.383'. [ 85.471270][ T7025] openvswitch: netlink: Message has 6 unknown bytes. [ 85.552246][ T7038] loop3: detected capacity change from 0 to 512 [ 85.569875][ T7038] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.596445][ T7038] EXT4-fs (loop3): 1 truncate cleaned up [ 85.611426][ T7038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.831521][ T7049] loop4: detected capacity change from 0 to 1024 [ 85.884253][ T7049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.916900][ T7049] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.972220][ T7049] netlink: 'syz.4.387': attribute type 39 has an invalid length. [ 86.159296][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.255912][ T7034] syz.2.382 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 86.270022][ T7034] CPU: 1 UID: 0 PID: 7034 Comm: syz.2.382 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 86.270086][ T7034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.270097][ T7034] Call Trace: [ 86.270103][ T7034] [ 86.270111][ T7034] __dump_stack+0x1d/0x30 [ 86.270130][ T7034] dump_stack_lvl+0xe8/0x140 [ 86.270148][ T7034] dump_stack+0x15/0x1b [ 86.270215][ T7034] dump_header+0x81/0x220 [ 86.270257][ T7034] oom_kill_process+0x334/0x3f0 [ 86.270294][ T7034] out_of_memory+0x979/0xb80 [ 86.270345][ T7034] try_charge_memcg+0x5e6/0x9e0 [ 86.270380][ T7034] obj_cgroup_charge_pages+0xa6/0x150 [ 86.270478][ T7034] __memcg_kmem_charge_page+0x9f/0x170 [ 86.270569][ T7034] __alloc_frozen_pages_noprof+0x188/0x360 [ 86.270730][ T7034] alloc_pages_mpol+0xb3/0x250 [ 86.270776][ T7034] alloc_pages_noprof+0x90/0x130 [ 86.270818][ T7034] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 86.270865][ T7034] __kvmalloc_node_noprof+0x30f/0x4e0 [ 86.270965][ T7034] ? ip_set_alloc+0x1f/0x30 [ 86.271004][ T7034] ? ip_set_alloc+0x1f/0x30 [ 86.271035][ T7034] ? __kmalloc_cache_noprof+0x189/0x320 [ 86.271146][ T7034] ip_set_alloc+0x1f/0x30 [ 86.271215][ T7034] hash_netiface_create+0x282/0x740 [ 86.271253][ T7034] ? __pfx_hash_netiface_create+0x10/0x10 [ 86.271290][ T7034] ip_set_create+0x3c9/0x960 [ 86.271329][ T7034] ? __nla_parse+0x40/0x60 [ 86.271423][ T7034] nfnetlink_rcv_msg+0x4c6/0x590 [ 86.271474][ T7034] ? selinux_capable+0x1f9/0x270 [ 86.271499][ T7034] netlink_rcv_skb+0x123/0x220 [ 86.271573][ T7034] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 86.271609][ T7034] nfnetlink_rcv+0x16b/0x1690 [ 86.271662][ T7034] ? __list_del_entry_valid_or_report+0x65/0x130 [ 86.271689][ T7034] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 86.271746][ T7034] ? should_fail_ex+0x30/0x280 [ 86.271773][ T7034] ? selinux_nlmsg_lookup+0x99/0x890 [ 86.271795][ T7034] ? selinux_netlink_send+0x59f/0x5f0 [ 86.271818][ T7034] ? __rcu_read_unlock+0x34/0x70 [ 86.271907][ T7034] ? __netlink_lookup+0x266/0x2a0 [ 86.272124][ T7034] netlink_unicast+0x59e/0x670 [ 86.272162][ T7034] netlink_sendmsg+0x58b/0x6b0 [ 86.272204][ T7034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.272244][ T7034] __sock_sendmsg+0x145/0x180 [ 86.272282][ T7034] ____sys_sendmsg+0x31e/0x4e0 [ 86.272333][ T7034] ___sys_sendmsg+0x17b/0x1d0 [ 86.272388][ T7034] __x64_sys_sendmsg+0xd4/0x160 [ 86.272422][ T7034] x64_sys_call+0x2999/0x2fb0 [ 86.272446][ T7034] do_syscall_64+0xd2/0x200 [ 86.272539][ T7034] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 86.272573][ T7034] ? clear_bhb_loop+0x40/0x90 [ 86.272594][ T7034] ? clear_bhb_loop+0x40/0x90 [ 86.272615][ T7034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.272692][ T7034] RIP: 0033:0x7f45437ce929 [ 86.272717][ T7034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.272734][ T7034] RSP: 002b:00007f4541e16038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.272838][ T7034] RAX: ffffffffffffffda RBX: 00007f45439f6080 RCX: 00007f45437ce929 [ 86.272855][ T7034] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 86.272885][ T7034] RBP: 00007f4543850ab1 R08: 0000000000000000 R09: 0000000000000000 [ 86.272901][ T7034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.272916][ T7034] R13: 0000000000000000 R14: 00007f45439f6080 R15: 00007ffe18a1ff38 [ 86.273001][ T7034] [ 86.273008][ T7034] memory: usage 307200kB, limit 307200kB, failcnt 1022 [ 86.618932][ T7034] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 86.626845][ T7034] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 86.634231][ T7034] Memory cgroup stats for /syz2: [ 86.634962][ T7034] cache 0 [ 86.642998][ T7034] rss 0 [ 86.645848][ T7034] shmem 0 [ 86.648899][ T7034] mapped_file 0 [ 86.652363][ T7034] dirty 0 [ 86.655354][ T7034] writeback 0 [ 86.658674][ T7034] workingset_refault_anon 1326 [ 86.663494][ T7034] workingset_refault_file 99 [ 86.668185][ T7034] swap 212992 [ 86.671505][ T7034] swapcached 8192 [ 86.675225][ T7034] nr_memmap_boot_pages 82971 [ 86.679893][ T7034] pgpgin 82967 [ 86.683272][ T7034] pglazyfree 75988 [ 86.686043][ T7059] netlink: 52 bytes leftover after parsing attributes in process `syz.4.388'. [ 86.686986][ T7034] pgfault 224 [ 86.686997][ T7034] a_other 8192 [ 86.687006][ T7034] inactive_anon 0 [ 86.700320][ T7059] xt_hashlimit: max too large, truncated to 1048576 [ 86.702516][ T7034] active_anon 8192 [ 86.702527][ T7034] inactive_file 0 [ 86.720465][ T7034] active_file 0 [ 86.723939][ T7034] hierarchical_memory_limit 314572800 [ 86.729341][ T7034] hierarchical_memsw_limit 9223372036854771712 [ 86.735621][ T7034] total_cache 0 [ 86.739223][ T7034] total_rss 0 [ 86.742555][ T7034] total_shmem 0 [ 86.746020][ T7034] total_mapped_file 0 [ 86.750030][ T7034] total_dirty 0 [ 86.753521][ T7034] total_writeback 0 [ 86.757345][ T7034] total_workingset_refault_anon 1334 [ 86.762725][ T7034] total_workingset_refault_file 99 [ 86.767896][ T7034] total_swap 212992 [ 86.771747][ T7034] total_swapcached 8192 [ 86.775989][ T7034] total_nr_memmap_boot_pages 94176 [ 86.781133][ T7034] total_pgpgin 94172 [ 86.785103][ T7034] total_pglazyfree 85245 [ 86.789440][ T7034] total_pgfault 225 [ 86.793268][ T7034] total_a_other 8192 [ 86.797247][ T7034] total_inactive_anon 0 [ 86.801438][ T7034] total_active_anon 8192 [ 86.805693][ T7034] total_inactive_file 0 [ 86.809874][ T7034] total_active_file 0 [ 86.813878][ T7034] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.382,pid=7022,uid=0 [ 86.828603][ T7034] Memory cgroup out of memory: Killed process 7022 (syz.2.382) total-vm:100164kB, anon-rss:936kB, file-rss:26664kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 87.028914][ T7034] syz.2.382 (7034) used greatest stack depth: 6064 bytes left [ 87.120841][ T7073] loop2: detected capacity change from 0 to 2048 [ 87.137173][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.150969][ T7073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.192454][ T29] kauditd_printk_skb: 607 callbacks suppressed [ 87.192467][ T29] audit: type=1400 audit(1749061718.793:7516): avc: denied { mac_admin } for pid=7083 comm="syz.5.394" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.245759][ T7084] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.261821][ T29] audit: type=1400 audit(1749061718.823:7517): avc: denied { relabelto } for pid=7083 comm="syz.5.394" name="15" dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 87.284376][ T7090] netlink: 'syz.3.393': attribute type 1 has an invalid length. [ 87.287970][ T29] audit: type=1400 audit(1749061718.823:7518): avc: denied { associate } for pid=7083 comm="syz.5.394" name="15" dev="tmpfs" ino=99 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 87.322394][ T29] audit: type=1400 audit(1749061718.833:7519): avc: denied { add_name } for pid=7083 comm="syz.5.394" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 87.346983][ T29] audit: type=1400 audit(1749061718.833:7520): avc: denied { create } for pid=7083 comm="syz.5.394" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 87.367487][ T29] audit: type=1400 audit(1749061718.833:7521): avc: denied { associate } for pid=7083 comm="syz.5.394" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 87.388991][ T29] audit: type=1400 audit(1749061718.843:7522): avc: denied { mounton } for pid=7083 comm="syz.5.394" path="/15/file0" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 87.411285][ T29] audit: type=1400 audit(1749061718.843:7523): avc: denied { create } for pid=7083 comm="syz.5.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.437810][ T7085] lo speed is unknown, defaulting to 1000 [ 87.444097][ T7085] dummy0 speed is unknown, defaulting to 1000 [ 87.450574][ T7085] lo speed is unknown, defaulting to 1000 [ 87.473676][ T7084] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.515675][ T29] audit: type=1400 audit(1749061718.883:7524): avc: denied { write } for pid=7082 comm="syz.3.393" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.536140][ T29] audit: type=1400 audit(1749061718.883:7525): avc: denied { read } for pid=7082 comm="syz.3.393" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.566684][ T7084] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.618902][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.661514][ T7084] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.706828][ T7125] loop2: detected capacity change from 0 to 512 [ 87.714062][ T7123] loop3: detected capacity change from 0 to 2048 [ 87.716075][ T7125] EXT4-fs: Ignoring removed nobh option [ 87.742514][ T7123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.755395][ T7125] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.395: corrupted inode contents [ 87.758467][ T7084] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.780120][ T7084] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.783041][ T7125] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.395: mark_inode_dirty error [ 87.793058][ T7084] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.813946][ T7084] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.830399][ T7125] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.395: corrupted inode contents [ 87.860556][ T7125] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.395: mark_inode_dirty error [ 87.898590][ T7125] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.395: Failed to acquire dquot type 0 [ 87.912687][ T7145] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.396: iget: bogus i_mode (4355) [ 87.919619][ T7125] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.395: corrupted inode contents [ 87.949027][ T7125] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.395: mark_inode_dirty error [ 87.979388][ T7123] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.396: iget: bogus i_mode (4355) [ 87.997387][ T7125] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.395: corrupted inode contents [ 88.026953][ T7125] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.395: mark_inode_dirty error [ 88.134201][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.152686][ T7155] loop4: detected capacity change from 0 to 1024 [ 88.178579][ T7125] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.395: corrupted inode contents [ 88.198221][ T7125] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 88.208957][ T7155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.224044][ T7125] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.395: corrupted inode contents [ 88.272773][ T7125] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.395: mark_inode_dirty error [ 88.318546][ T7125] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 88.328865][ T7125] EXT4-fs (loop2): 1 truncate cleaned up [ 88.335017][ T7125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.368644][ T7125] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.407739][ T7125] openvswitch: netlink: Message has 6 unknown bytes. [ 88.440145][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.628735][ T2970] usb 6-1: device descriptor read/8, error -110 [ 88.738690][ T2970] usb usb6-port1: attempt power cycle [ 88.878994][ T2970] usb 6-1: SetAddress Request (4) to port 0 [ 88.897938][ T2970] usb 6-1: new SuperSpeed USB device number 4 using vhci_hcd [ 88.904055][ T7163] : renamed from vlan1 (while UP) [ 89.110218][ T7175] __nla_validate_parse: 4 callbacks suppressed [ 89.110237][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.400'. [ 89.156206][ T7181] futex_wake_op: syz.0.401 tries to shift op by -1; fix this program [ 89.192516][ T7181] SELinux: failed to load policy [ 89.238646][ T7181] netlink: 'syz.0.401': attribute type 15 has an invalid length. [ 89.281561][ T7181] pimreg: entered allmulticast mode [ 89.289387][ T7184] netlink: 52 bytes leftover after parsing attributes in process `syz.5.403'. [ 89.301300][ T7181] pimreg: left allmulticast mode [ 89.309634][ T7184] xt_hashlimit: max too large, truncated to 1048576 [ 89.321267][ T7186] netlink: 'syz.3.402': attribute type 27 has an invalid length. [ 89.351175][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.381592][ T7194] netlink: 'syz.3.402': attribute type 27 has an invalid length. [ 89.455479][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.483284][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.511253][ T7186] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.520292][ T7186] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.529232][ T7186] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.538129][ T7186] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.707587][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 89.716536][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 89.730482][ T7186] 9pnet_virtio: no channels available for device [ 89.793535][ T7207] loop2: detected capacity change from 0 to 2048 [ 89.811444][ T7207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.927290][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.092664][ T7216] netlink: 'syz.2.409': attribute type 1 has an invalid length. [ 90.100566][ T7216] netlink: 224 bytes leftover after parsing attributes in process `syz.2.409'. [ 90.107537][ T7219] lo speed is unknown, defaulting to 1000 [ 90.117379][ T7219] dummy0 speed is unknown, defaulting to 1000 [ 90.133737][ T7223] netlink: 'syz.0.407': attribute type 1 has an invalid length. [ 90.141541][ T7223] netlink: 224 bytes leftover after parsing attributes in process `syz.0.407'. [ 90.143952][ T7219] lo speed is unknown, defaulting to 1000 [ 90.222170][ T7236] Cannot find add_set index 3 as target [ 90.297481][ T7257] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 90.334215][ T7258] loop2: detected capacity change from 0 to 512 [ 90.355730][ T7258] EXT4-fs (loop2): Invalid default hash set in the superblock [ 90.388001][ T7265] sd 0:0:1:0: device reset [ 90.446278][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'. [ 90.605600][ T7274] sd 0:0:1:0: device reset [ 90.705972][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 90.837750][ T7278] loop3: detected capacity change from 0 to 2048 [ 90.868426][ T7278] EXT4-fs (loop3): failed to initialize system zone (-117) [ 90.885159][ T7278] EXT4-fs (loop3): mount failed [ 91.141387][ T7278] lo speed is unknown, defaulting to 1000 [ 91.177829][ T7292] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 91.181913][ T7278] dummy0 speed is unknown, defaulting to 1000 [ 91.207948][ T7292] SELinux: failed to load policy [ 91.243000][ T7278] lo speed is unknown, defaulting to 1000 [ 91.352886][ T7293] netlink: 48 bytes leftover after parsing attributes in process `syz.4.422'. [ 91.561211][ T7301] netlink: 52 bytes leftover after parsing attributes in process `syz.2.425'. [ 91.581390][ T7307] lo speed is unknown, defaulting to 1000 [ 91.599942][ T7305] xt_hashlimit: max too large, truncated to 1048576 [ 91.606899][ T7307] dummy0 speed is unknown, defaulting to 1000 [ 91.621660][ T7307] lo speed is unknown, defaulting to 1000 [ 91.882606][ T7357] loop3: detected capacity change from 0 to 128 [ 92.340748][ T29] kauditd_printk_skb: 823 callbacks suppressed [ 92.340765][ T29] audit: type=1326 audit(1749061723.943:8347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ab5ee929 code=0x7ffc0000 [ 92.349407][ T7371] sd 0:0:1:0: device reset [ 92.372281][ T29] audit: type=1326 audit(1749061723.943:8348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ab5ee929 code=0x7ffc0000 [ 92.398254][ T29] audit: type=1326 audit(1749061723.953:8349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3ab5ed290 code=0x7ffc0000 [ 92.421749][ T29] audit: type=1326 audit(1749061723.953:8350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ab5ee929 code=0x7ffc0000 [ 92.445191][ T29] audit: type=1326 audit(1749061723.953:8351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ab5ee929 code=0x7ffc0000 [ 92.468605][ T29] audit: type=1326 audit(1749061723.953:8352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3ab5ee929 code=0x7ffc0000 [ 92.525586][ T7371] loop4: detected capacity change from 0 to 1764 [ 92.533299][ T7371] iso9660: Unknown parameter 'mapacorn' [ 92.547518][ T29] audit: type=1326 audit(1749061724.033:8353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ab5ee929 code=0x7ffc0000 [ 92.571196][ T29] audit: type=1326 audit(1749061724.033:8354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ab5ee929 code=0x7ffc0000 [ 92.594624][ T29] audit: type=1326 audit(1749061724.103:8355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3ab5ee929 code=0x7ffc0000 [ 92.617997][ T29] audit: type=1326 audit(1749061724.103:8356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ab5ee929 code=0x7ffc0000 [ 92.692998][ T7380] openvswitch: netlink: Message has 6 unknown bytes. [ 92.856205][ T7398] Cannot find add_set index 3 as target [ 92.932003][ T7398] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 93.054581][ T7404] lo speed is unknown, defaulting to 1000 [ 93.061219][ T7404] dummy0 speed is unknown, defaulting to 1000 [ 93.068254][ T7404] lo speed is unknown, defaulting to 1000 [ 93.766260][ T7431] loop4: detected capacity change from 0 to 512 [ 93.798189][ T7431] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.807488][ T7431] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 93.830743][ T7431] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 93.858735][ T7431] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 93.871789][ T7431] System zones: 0-2, 18-18, 34-35 [ 93.886293][ T7446] loop3: detected capacity change from 0 to 128 [ 93.894569][ T7431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.912350][ T7446] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.927919][ T7446] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.988567][ T2970] usb 6-1: device descriptor read/8, error -110 [ 94.098508][ T2970] usb 6-1: new SuperSpeed USB device number 4 using vhci_hcd [ 94.601354][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.650066][ T7466] lo speed is unknown, defaulting to 1000 [ 94.657202][ T7466] dummy0 speed is unknown, defaulting to 1000 [ 94.659317][ T7458] __nla_validate_parse: 8 callbacks suppressed [ 94.659387][ T7458] netlink: 52 bytes leftover after parsing attributes in process `syz.5.442'. [ 94.668953][ T7466] lo speed is unknown, defaulting to 1000 [ 94.695653][ T7470] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 94.699393][ T3324] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.703343][ T7470] netlink: 224 bytes leftover after parsing attributes in process `syz.4.441'. [ 94.754045][ T7472] loop2: detected capacity change from 0 to 1024 [ 94.779983][ T7480] futex_wake_op: syz.3.443 tries to shift op by -1; fix this program [ 94.790615][ T7480] SELinux: failed to load policy [ 94.795917][ T7476] netlink: 52 bytes leftover after parsing attributes in process `syz.5.445'. [ 94.820825][ T7476] xt_hashlimit: max too large, truncated to 1048576 [ 94.827618][ T7457] smc: net device bond0 applied user defined pnetid SYZ2 [ 94.858812][ T7480] netlink: 'syz.3.443': attribute type 15 has an invalid length. [ 94.873931][ T7474] smc: net device bond0 erased user defined pnetid SYZ2 [ 94.923801][ T7480] pimreg: entered allmulticast mode [ 94.958048][ T7480] pimreg: left allmulticast mode [ 95.038038][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 95.076515][ T7513] loop4: detected capacity change from 0 to 512 [ 95.105911][ T7513] EXT4-fs: Ignoring removed nobh option [ 95.157734][ T7513] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.446: corrupted inode contents [ 95.190498][ T7513] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm syz.4.446: mark_inode_dirty error [ 95.201937][ T7519] netlink: 'syz.3.447': attribute type 4 has an invalid length. [ 95.225693][ T7519] netlink: 'syz.3.447': attribute type 4 has an invalid length. [ 95.229933][ T7513] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.446: corrupted inode contents [ 95.253574][ T7519] loop3: detected capacity change from 0 to 128 [ 95.277020][ T7513] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.446: mark_inode_dirty error [ 95.309101][ T7519] syz.3.447: attempt to access beyond end of device [ 95.309101][ T7519] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 95.320386][ T7513] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.446: Failed to acquire dquot type 0 [ 95.322416][ T7519] Buffer I/O error on dev loop3, logical block 2065, async page read [ 95.357108][ T7513] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.446: corrupted inode contents [ 95.381179][ T7513] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.446: mark_inode_dirty error [ 95.385439][ T7519] syz.3.447: attempt to access beyond end of device [ 95.385439][ T7519] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 95.405637][ T7519] Buffer I/O error on dev loop3, logical block 2066, async page read [ 95.406512][ T7513] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.446: corrupted inode contents [ 95.445091][ T7519] syz.3.447: attempt to access beyond end of device [ 95.445091][ T7519] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 95.458286][ T7519] Buffer I/O error on dev loop3, logical block 2067, async page read [ 95.482552][ T7513] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.446: mark_inode_dirty error [ 95.504971][ T7519] syz.3.447: attempt to access beyond end of device [ 95.504971][ T7519] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 95.505374][ T7513] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.446: corrupted inode contents [ 95.518182][ T7519] Buffer I/O error on dev loop3, logical block 2068, async page read [ 95.568196][ T7513] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 95.583441][ T7519] syz.3.447: attempt to access beyond end of device [ 95.583441][ T7519] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 95.596738][ T7519] Buffer I/O error on dev loop3, logical block 2069, async page read [ 95.625366][ T7513] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.446: corrupted inode contents [ 95.635408][ T7519] syz.3.447: attempt to access beyond end of device [ 95.635408][ T7519] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 95.650356][ T7519] Buffer I/O error on dev loop3, logical block 2070, async page read [ 95.680011][ T7513] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.446: mark_inode_dirty error [ 95.688502][ T7519] syz.3.447: attempt to access beyond end of device [ 95.688502][ T7519] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 95.704352][ T7519] Buffer I/O error on dev loop3, logical block 2071, async page read [ 95.728871][ T7513] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 95.731054][ T7519] syz.3.447: attempt to access beyond end of device [ 95.731054][ T7519] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 95.751142][ T7519] Buffer I/O error on dev loop3, logical block 2072, async page read [ 95.774580][ T7513] EXT4-fs (loop4): 1 truncate cleaned up [ 95.776405][ T7519] syz.3.447: attempt to access beyond end of device [ 95.776405][ T7519] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 95.784905][ T7513] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.793549][ T7519] Buffer I/O error on dev loop3, logical block 2065, async page read [ 95.843195][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.446'. [ 95.878591][ T7513] openvswitch: netlink: Message has 6 unknown bytes. [ 95.896393][ T7519] syz.3.447: attempt to access beyond end of device [ 95.896393][ T7519] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 95.909626][ T7519] Buffer I/O error on dev loop3, logical block 2066, async page read [ 95.966258][ T7531] loop4: detected capacity change from 0 to 256 [ 95.992210][ T7531] msdos: Unknown parameter '?H(B a"!5' [ 96.028116][ T7543] ipvlan2: entered promiscuous mode [ 96.033543][ T7543] ipvlan2: entered allmulticast mode [ 96.038894][ T7543] hsr0: entered allmulticast mode [ 96.043982][ T7543] hsr_slave_0: entered allmulticast mode [ 96.049647][ T7543] hsr_slave_1: entered allmulticast mode [ 96.320175][ T7557] lo speed is unknown, defaulting to 1000 [ 96.326693][ T7557] dummy0 speed is unknown, defaulting to 1000 [ 96.333619][ T7557] lo speed is unknown, defaulting to 1000 [ 96.670650][ T7561] netlink: 'syz.0.457': attribute type 4 has an invalid length. [ 96.960532][ T7564] netlink: 52 bytes leftover after parsing attributes in process `syz.5.458'. [ 97.087116][ T7589] lo speed is unknown, defaulting to 1000 [ 97.128883][ T7589] dummy0 speed is unknown, defaulting to 1000 [ 97.152281][ T7589] lo speed is unknown, defaulting to 1000 [ 97.329817][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 97.356135][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 97.356152][ T29] audit: type=1400 audit(1749061728.953:8684): avc: denied { firmware_load } for pid=7594 comm="syz.2.460" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 97.398550][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 97.427588][ T7617] netlink: 52 bytes leftover after parsing attributes in process `syz.0.461'. [ 97.469862][ T29] audit: type=1326 audit(1749061729.023:8685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 97.493399][ T29] audit: type=1326 audit(1749061729.023:8686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 97.516878][ T29] audit: type=1326 audit(1749061729.023:8687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 97.540239][ T29] audit: type=1326 audit(1749061729.023:8688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 97.563740][ T29] audit: type=1326 audit(1749061729.023:8689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 97.566658][ T7625] netlink: 328 bytes leftover after parsing attributes in process `syz.5.462'. [ 97.587083][ T29] audit: type=1326 audit(1749061729.023:8690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 97.619438][ T29] audit: type=1326 audit(1749061729.023:8691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 97.642778][ T29] audit: type=1326 audit(1749061729.023:8692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 97.666152][ T29] audit: type=1326 audit(1749061729.023:8693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7616 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424db9e929 code=0x7ffc0000 [ 97.887080][ T7624] netlink: 'syz.5.462': attribute type 1 has an invalid length. [ 97.997355][ T7557] Cannot find set identified by id 0 to match [ 98.007862][ T7629] openvswitch: netlink: Message has 6 unknown bytes. [ 98.048873][ T7531] syz.4.451 (7531) used greatest stack depth: 5880 bytes left [ 98.205604][ T7646] netlink: 'syz.4.467': attribute type 4 has an invalid length. [ 98.270098][ T6838] lo speed is unknown, defaulting to 1000 [ 98.275874][ T6838] syz0: Port: 1 Link DOWN [ 98.475191][ T7654] lo speed is unknown, defaulting to 1000 [ 98.481760][ T7654] dummy0 speed is unknown, defaulting to 1000 [ 98.489055][ T7654] lo speed is unknown, defaulting to 1000 [ 99.323878][ T7681] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 99.367659][ T7683] loop4: detected capacity change from 0 to 512 [ 99.386281][ T7683] journal_path: Non-blockdev passed as './file0' [ 99.392745][ T7683] EXT4-fs: error: could not find journal device path [ 99.535392][ T7683] loop4: detected capacity change from 0 to 512 [ 99.553634][ T7683] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.637898][ T7683] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.472: iget: bad extended attribute block 1 [ 99.673680][ T7683] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.472: couldn't read orphan inode 15 (err -117) [ 99.733226][ T7683] EXT4-fs mount: 4 callbacks suppressed [ 99.733313][ T7683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.972731][ T7695] netlink: 'syz.4.472': attribute type 1 has an invalid length. [ 99.980592][ T7695] __nla_validate_parse: 7 callbacks suppressed [ 99.980608][ T7695] netlink: 224 bytes leftover after parsing attributes in process `syz.4.472'. [ 100.202677][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.256728][ T7702] netlink: 'syz.3.474': attribute type 1 has an invalid length. [ 100.264614][ T7702] netlink: 224 bytes leftover after parsing attributes in process `syz.3.474'. [ 100.292482][ T7700] lo speed is unknown, defaulting to 1000 [ 100.321421][ T7700] dummy0 speed is unknown, defaulting to 1000 [ 100.327798][ T7700] lo speed is unknown, defaulting to 1000 [ 100.626782][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 100.728824][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'. [ 100.786042][ T7743] openvswitch: netlink: Message has 6 unknown bytes. [ 100.986030][ T7754] netlink: 32 bytes leftover after parsing attributes in process `syz.3.480'. [ 100.999976][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.478'. [ 101.035980][ T7754] infiniband syw1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.361452][ T7778] netlink: 52 bytes leftover after parsing attributes in process `syz.0.481'. [ 102.053705][ T7801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=7801 comm=syz.4.488 [ 102.092910][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 102.126651][ T7804] loop3: detected capacity change from 0 to 512 [ 102.139148][ T7804] EXT4-fs: Ignoring removed nobh option [ 102.161610][ T7804] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.489: corrupted inode contents [ 102.192593][ T7804] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.489: mark_inode_dirty error [ 102.217496][ T7804] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.489: corrupted inode contents [ 102.234847][ T7804] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.489: mark_inode_dirty error [ 102.246702][ T7804] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.489: Failed to acquire dquot type 0 [ 102.260523][ T7804] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.489: corrupted inode contents [ 102.272647][ T7804] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.489: mark_inode_dirty error [ 102.285684][ T7804] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.489: corrupted inode contents [ 102.297935][ T7804] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.489: mark_inode_dirty error [ 102.311045][ T7804] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.489: corrupted inode contents [ 102.333288][ T7804] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 102.344579][ T7804] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.489: corrupted inode contents [ 102.368413][ T7804] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.489: mark_inode_dirty error [ 102.383445][ T7804] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 102.393399][ T7804] EXT4-fs (loop3): 1 truncate cleaned up [ 102.400939][ T7804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.414922][ T7804] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.428478][ T7816] netlink: 596 bytes leftover after parsing attributes in process `syz.2.490'. [ 102.432341][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.489'. [ 102.460383][ T7804] openvswitch: netlink: Message has 6 unknown bytes. [ 102.484191][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.504894][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 102.504910][ T29] audit: type=1400 audit(1749061734.103:8867): avc: denied { append } for pid=7815 comm="syz.2.490" name="001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 102.541428][ T29] audit: type=1326 audit(1749061734.133:8868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ab5ee929 code=0x7ffc0000 [ 102.564957][ T29] audit: type=1326 audit(1749061734.133:8869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ab5ee929 code=0x7ffc0000 [ 102.588536][ T29] audit: type=1326 audit(1749061734.133:8870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc3ab5ee929 code=0x7ffc0000 [ 102.612012][ T29] audit: type=1326 audit(1749061734.133:8871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ab5ee929 code=0x7ffc0000 [ 102.635528][ T29] audit: type=1326 audit(1749061734.133:8872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ab5ee929 code=0x7ffc0000 [ 102.659203][ T29] audit: type=1326 audit(1749061734.133:8873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3ab5ed290 code=0x7ffc0000 [ 102.682863][ T29] audit: type=1326 audit(1749061734.133:8874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ab5ee929 code=0x7ffc0000 [ 102.706411][ T29] audit: type=1326 audit(1749061734.133:8875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ab5ee929 code=0x7ffc0000 [ 102.729933][ T29] audit: type=1326 audit(1749061734.133:8876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7819 comm="syz.4.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fc3ab5ee929 code=0x7ffc0000 [ 102.807360][ T7827] xt_hashlimit: max too large, truncated to 1048576 [ 102.835663][ T7831] SELinux: failed to load policy [ 103.250123][ T7837] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1768647778) [ 103.260484][ T7837] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 103.811899][ T7868] openvswitch: netlink: Message has 6 unknown bytes. [ 103.896843][ T7873] lo speed is unknown, defaulting to 1000 [ 103.910222][ T7873] dummy0 speed is unknown, defaulting to 1000 [ 103.923766][ T7877] netlink: 'syz.2.504': attribute type 1 has an invalid length. [ 103.924609][ T7873] lo speed is unknown, defaulting to 1000 [ 104.539817][ T7907] loop3: detected capacity change from 0 to 2048 [ 104.733018][ T7912] lo speed is unknown, defaulting to 1000 [ 104.739700][ T7912] dummy0 speed is unknown, defaulting to 1000 [ 104.746524][ T7912] lo speed is unknown, defaulting to 1000 [ 105.282056][ T7944] SELinux: Context system_u:object_r:initrc_exec_t:s0 is not valid (left unmapped). [ 105.420115][ T7948] __nla_validate_parse: 7 callbacks suppressed [ 105.420131][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 105.472735][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 105.597483][ T7953] netlink: 52 bytes leftover after parsing attributes in process `syz.3.512'. [ 106.155348][ T7971] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1768647778) [ 106.165671][ T7971] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 106.435939][ T7982] loop3: detected capacity change from 0 to 512 [ 106.460155][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 106.472638][ T7985] loop4: detected capacity change from 0 to 512 [ 106.479506][ T7985] EXT4-fs: Ignoring removed nobh option [ 106.480429][ T7982] EXT4-fs (loop3): 1 orphan inode deleted [ 106.493478][ T7982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.506259][ T3576] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:39: Failed to release dquot type 1 [ 106.520853][ T7985] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.518: corrupted inode contents [ 106.533035][ T7982] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.533497][ T7985] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm syz.4.518: mark_inode_dirty error [ 106.553468][ T7982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.565791][ T7985] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.518: corrupted inode contents [ 106.579491][ T7985] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.518: mark_inode_dirty error [ 106.591469][ T7985] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.518: Failed to acquire dquot type 0 [ 106.604017][ T7985] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.518: corrupted inode contents [ 106.616506][ T7985] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.518: mark_inode_dirty error [ 106.629513][ T7985] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.518: corrupted inode contents [ 106.642217][ T7985] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.518: mark_inode_dirty error [ 106.654847][ T7985] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.518: corrupted inode contents [ 106.667359][ T7985] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 106.683897][ T7985] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.518: corrupted inode contents [ 106.697946][ T7982] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.699372][ T7985] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.518: mark_inode_dirty error [ 106.717409][ T7985] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 106.736113][ T7985] EXT4-fs (loop4): 1 truncate cleaned up [ 106.746070][ T7985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.759282][ T7985] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.774675][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.518'. [ 106.805763][ T7985] openvswitch: netlink: Message has 6 unknown bytes. [ 106.825111][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.844908][ T8009] SELinux: syz.4.523 (8009) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 106.862303][ T8010] IPv6: sit1: Disabled Multicast RS [ 106.869512][ T8010] sit1: entered allmulticast mode [ 106.945272][ T8019] netlink: 'syz.0.524': attribute type 13 has an invalid length. [ 107.511715][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 107.511728][ T29] audit: type=1400 audit(1749061739.113:9508): avc: denied { allowed } for pid=8048 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.557469][ T29] audit: type=1400 audit(1749061739.133:9509): avc: denied { create } for pid=8048 comm="syz.2.527" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 107.578730][ T29] audit: type=1400 audit(1749061739.133:9510): avc: denied { map } for pid=8048 comm="syz.2.527" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 107.602928][ T29] audit: type=1400 audit(1749061739.133:9511): avc: denied { read write } for pid=8048 comm="syz.2.527" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 107.630316][ T29] audit: type=1400 audit(1749061739.213:9512): avc: denied { create } for pid=8048 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 107.650037][ T29] audit: type=1400 audit(1749061739.213:9513): avc: denied { read } for pid=8048 comm="syz.2.527" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.671139][ T29] audit: type=1400 audit(1749061739.213:9514): avc: denied { open } for pid=8048 comm="syz.2.527" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.706065][ T29] audit: type=1400 audit(1749061739.303:9515): avc: denied { create } for pid=8048 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.741164][ T29] audit: type=1400 audit(1749061739.343:9516): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.765462][ T29] audit: type=1400 audit(1749061739.343:9517): avc: denied { open } for pid=3324 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.804625][ T1054] IPVS: starting estimator thread 0... [ 107.928560][ T8064] IPVS: using max 2064 ests per chain, 103200 per kthread [ 108.315127][ T8079] netlink: 52 bytes leftover after parsing attributes in process `syz.5.532'. [ 108.706052][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 108.718613][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.536'. [ 108.737738][ T8091] openvswitch: netlink: Message has 6 unknown bytes. [ 109.236927][ T8112] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 109.348509][ T2970] usb 6-1: device descriptor read/8, error -110 [ 109.387890][ T8117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.513055][ T8120] netlink: 'syz.0.544': attribute type 10 has an invalid length. [ 109.520865][ T8120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.544'. [ 109.567502][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 109.730314][ T8120] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 109.775664][ T8125] random: crng reseeded on system resumption [ 109.806034][ T8120] team0: Failed to send options change via netlink (err -105) [ 109.813647][ T8120] team0: Port device geneve1 added [ 109.884591][ T8117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.971618][ T8117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.998599][ T2970] usb 6-1: SetAddress Request (5) to port 0 [ 110.008976][ T2970] usb 6-1: new SuperSpeed USB device number 5 using vhci_hcd [ 110.028957][ T8117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.149341][ T8135] bridge0: entered allmulticast mode [ 110.240370][ T8117] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.265685][ T8117] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.290410][ T8117] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.314800][ T8117] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.327869][ T8146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.338796][ T8146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.349379][ T8146] bond0 (unregistering): Released all slaves [ 110.698452][ T8190] block device autoloading is deprecated and will be removed. [ 110.706005][ T8190] bio_check_eod: 6 callbacks suppressed [ 110.706017][ T8190] syz.3.552: attempt to access beyond end of device [ 110.706017][ T8190] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 110.811710][ T8204] lo speed is unknown, defaulting to 1000 [ 110.817781][ T8204] dummy0 speed is unknown, defaulting to 1000 [ 110.824251][ T8204] lo speed is unknown, defaulting to 1000 [ 110.895632][ T8231] __nla_validate_parse: 3 callbacks suppressed [ 110.895650][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'. [ 110.927511][ T8233] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 111.263330][ T8251] netlink: 52 bytes leftover after parsing attributes in process `syz.0.559'. [ 112.055929][ T8258] loop0: detected capacity change from 0 to 512 [ 112.072195][ T8258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.085873][ T8258] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.102669][ T8258] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1768647778) [ 112.112979][ T8258] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 112.485139][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.506479][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'. [ 112.518288][ T8289] loop0: detected capacity change from 0 to 512 [ 112.524880][ T8289] EXT4-fs: Ignoring removed nobh option [ 112.540646][ T8289] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.565: corrupted inode contents [ 112.552956][ T8289] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.565: mark_inode_dirty error [ 112.564876][ T8289] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.565: corrupted inode contents [ 112.576967][ T8289] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.565: mark_inode_dirty error [ 112.588806][ T8289] __quota_error: 460 callbacks suppressed [ 112.588848][ T8289] Quota error (device loop0): write_blk: dquota write failed [ 112.602094][ T8289] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 112.612050][ T8289] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.565: Failed to acquire dquot type 0 [ 112.624048][ T8289] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.565: corrupted inode contents [ 112.636053][ T8289] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.565: mark_inode_dirty error [ 112.647647][ T8289] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.565: corrupted inode contents [ 112.660104][ T8289] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.565: mark_inode_dirty error [ 112.671717][ T8289] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.565: corrupted inode contents [ 112.683997][ T8289] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 112.692891][ T8289] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.565: corrupted inode contents [ 112.705130][ T8289] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.565: mark_inode_dirty error [ 112.716495][ T8289] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 112.726063][ T8289] EXT4-fs (loop0): 1 truncate cleaned up [ 112.732397][ T8289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.745085][ T8289] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.756904][ T8289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 112.771118][ T8289] openvswitch: netlink: Message has 6 unknown bytes. [ 112.789078][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.807128][ T29] audit: type=1400 audit(1749061744.403:9978): avc: denied { read } for pid=8297 comm="syz.0.566" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.830092][ T29] audit: type=1400 audit(1749061744.403:9979): avc: denied { open } for pid=8297 comm="syz.0.566" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.855447][ T29] audit: type=1400 audit(1749061744.463:9980): avc: denied { create } for pid=8297 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.876396][ T29] audit: type=1400 audit(1749061744.463:9981): avc: denied { write } for pid=8297 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.897512][ T29] audit: type=1400 audit(1749061744.483:9982): avc: denied { connect } for pid=8297 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 112.918585][ T29] audit: type=1326 audit(1749061744.513:9983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.5.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b4f9be929 code=0x7fc00000 [ 112.975746][ T29] audit: type=1400 audit(1749061744.573:9984): avc: denied { create } for pid=8307 comm="syz.5.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.998879][ T29] audit: type=1400 audit(1749061744.593:9985): avc: denied { write } for pid=8297 comm="syz.0.566" path="socket:[13454]" dev="sockfs" ino=13454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 113.088577][ T8306] IPVS: Error connecting to the multicast addr [ 113.105304][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'. [ 113.119912][ T8315] loop0: detected capacity change from 0 to 512 [ 113.126803][ T8315] EXT4-fs: Ignoring removed nobh option [ 113.131331][ T8315] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.570: corrupted inode contents [ 113.131636][ T8315] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.570: mark_inode_dirty error [ 113.131935][ T8315] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.570: corrupted inode contents [ 113.132458][ T8315] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.570: mark_inode_dirty error [ 113.132727][ T8315] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.570: Failed to acquire dquot type 0 [ 113.133371][ T8315] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.570: corrupted inode contents [ 113.133578][ T8315] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.570: mark_inode_dirty error [ 113.133734][ T8315] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.570: corrupted inode contents [ 113.133975][ T8315] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.570: mark_inode_dirty error [ 113.134144][ T8315] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.570: corrupted inode contents [ 113.134395][ T8315] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 113.134988][ T8315] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.570: corrupted inode contents [ 113.135160][ T8315] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.570: mark_inode_dirty error [ 113.135526][ T8315] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 113.136116][ T8315] EXT4-fs (loop0): 1 truncate cleaned up [ 113.302403][ T8315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.315362][ T8315] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.327566][ T8315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.570'. [ 113.344220][ T8315] openvswitch: netlink: Message has 6 unknown bytes. [ 113.361606][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.411589][ T8339] netlink: 52 bytes leftover after parsing attributes in process `syz.2.571'. [ 113.834518][ T8348] loop4: detected capacity change from 0 to 1024 [ 113.844785][ T8348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.943493][ T8355] hub 1-0:1.0: USB hub found [ 113.948412][ T8355] hub 1-0:1.0: 8 ports detected [ 113.989735][ T8348] ================================================================== [ 113.997885][ T8348] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush [ 114.007309][ T8348] [ 114.009652][ T8348] read-write to 0xffff888119cbd758 of 4 bytes by task 8353 on cpu 0: [ 114.017742][ T8348] __writeback_single_inode+0x1e3/0x7c0 [ 114.023331][ T8348] writeback_single_inode+0x167/0x3e0 [ 114.028743][ T8348] sync_inode_metadata+0x5b/0x90 [ 114.033711][ T8348] generic_buffers_fsync_noflush+0xd9/0x120 [ 114.039650][ T8348] ext4_sync_file+0x1ab/0x690 [ 114.044439][ T8348] vfs_fsync_range+0x10d/0x130 [ 114.049236][ T8348] ext4_buffered_write_iter+0x34f/0x3c0 [ 114.054819][ T8348] ext4_file_write_iter+0xdbf/0xf00 [ 114.060032][ T8348] iter_file_splice_write+0x5f2/0x970 [ 114.065428][ T8348] direct_splice_actor+0x156/0x2a0 [ 114.070568][ T8348] splice_direct_to_actor+0x312/0x680 [ 114.075962][ T8348] do_splice_direct+0xda/0x150 [ 114.080766][ T8348] do_sendfile+0x380/0x650 [ 114.085201][ T8348] __x64_sys_sendfile64+0x105/0x150 [ 114.090422][ T8348] x64_sys_call+0xb39/0x2fb0 [ 114.095035][ T8348] do_syscall_64+0xd2/0x200 [ 114.099565][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.105470][ T8348] [ 114.107794][ T8348] read to 0xffff888119cbd758 of 4 bytes by task 8348 on cpu 1: [ 114.115347][ T8348] generic_buffers_fsync_noflush+0x80/0x120 [ 114.121376][ T8348] ext4_sync_file+0x1ab/0x690 [ 114.126089][ T8348] vfs_fsync_range+0x10d/0x130 [ 114.130864][ T8348] ext4_buffered_write_iter+0x34f/0x3c0 [ 114.136425][ T8348] ext4_file_write_iter+0xdbf/0xf00 [ 114.141633][ T8348] iter_file_splice_write+0x5f2/0x970 [ 114.147025][ T8348] direct_splice_actor+0x156/0x2a0 [ 114.152159][ T8348] splice_direct_to_actor+0x312/0x680 [ 114.157564][ T8348] do_splice_direct+0xda/0x150 [ 114.162345][ T8348] do_sendfile+0x380/0x650 [ 114.166774][ T8348] __x64_sys_sendfile64+0x105/0x150 [ 114.172008][ T8348] x64_sys_call+0xb39/0x2fb0 [ 114.176620][ T8348] do_syscall_64+0xd2/0x200 [ 114.181159][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.187069][ T8348] [ 114.189398][ T8348] value changed: 0x00000022 -> 0x00000000 [ 114.195111][ T8348] [ 114.197431][ T8348] Reported by Kernel Concurrency Sanitizer on: [ 114.203583][ T8348] CPU: 1 UID: 0 PID: 8348 Comm: syz.4.573 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 114.215572][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.225647][ T8348] ================================================================== [ 114.820094][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.108538][ T2970] usb 6-1: device descriptor read/8, error -110 [ 115.219486][ T2970] usb 6-1: new SuperSpeed USB device number 5 using vhci_hcd