last executing test programs: 4m10.865773516s ago: executing program 32 (id=195): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x427}], 0x2}, 0x0) 4m1.678580905s ago: executing program 5 (id=304): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000400db00000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) fcntl$getownex(r6, 0x10, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b", 0x2}], 0x1}}], 0x1, 0x4000000) 4m1.614894656s ago: executing program 5 (id=305): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x17) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = dup3(r1, r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x40, 0x401, 0x9, 0x1, 0x11, "7c1cd7da16f31cdbeffe968c495b66c8c9dc9e"}) sendmsg$tipc(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)="7c7c4811cbb7c290272c20d379188b7ef1c83a54ce81c237f34b084fc2d2b62fac461d40b047eacb055145fdcbcf804154c1202a296b1fb8cc69ebda8d7aa6c6c10912c97e", 0x45}, {&(0x7f0000000140)="99440762b9c97fb4a77e02d9b136d82ec3ac79c8ee391f6ffe45af145360a4f85793", 0x22}, {&(0x7f0000000180)="23c0be993c9a2cbe19369b390e0fb65ceca1746cbc10ba2077f860a1eb86a9f099168a621f29891f646ccec174df2b755f64070b4ccabb55ea298161c0331b394538ae1666d9a850389e0bc04415414db6bd8ca8ee0ad082cbf416c8bfcbc9b10c937365df69f742827b515ec2", 0x6d}, {&(0x7f0000000200)="edaffa5e549d65a980b9b8340f4f10c65a875f38c88a0833ee44678a5407e52c14b66690364ed7279081f29361a5b54eeb9b2b4392e626f39ac03c63ad2d3c977bc5", 0x42}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="7d979f056f05b2dc589ad32624cd4480c1cd13dceb4114921ca71d0bb57071582f", 0x21}], 0x6, &(0x7f0000001340)="6bd3d4fca4bfadd4110daa2d9b8464df6e9dc783c43ea6158ec1efaa91fda64fba97999e7cec965b", 0x28, 0x4041}, 0x4000000) r3 = openat$cgroup_pressure(r2, &(0x7f00000013c0)='cpu.pressure\x00', 0x2, 0x0) ioctl$FIOCLEX(r3, 0x5451) ioctl$TCGETA(r0, 0x5405, &(0x7f0000001400)) r4 = dup2(r3, 0xffffffffffffffff) syz_clone3(&(0x7f0000001680)={0x4000000, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)=0x0, {}, &(0x7f0000001500)=""/73, 0x49, &(0x7f0000001580)=""/153, &(0x7f0000001640)=[0x0], 0x1, {r2}}, 0x58) tkill(r5, 0x3c) ioctl$TCGETS(r0, 0x5401, &(0x7f0000001700)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001800)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000017c0)={0xffffffffffffffff}, 0x0, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f0000001840)={0x10, 0x30, 0xfa00, {&(0x7f0000001780), 0x0, {0xa, 0x4e22, 0x2, @loopback, 0x4e}, r8}}, 0x38) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000001880)={0x7cb, r7, 0x4, {0x8, 0xed}, 0xff}, 0x1) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001900)={&(0x7f00000018c0)='dlm_unlock_end\x00', r4, 0x0, 0xffffffffffff92a3}, 0x18) r9 = open_tree(r2, &(0x7f0000001940)='./file0\x00', 0x100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{r9, 0xffffffffffffffff}, &(0x7f0000001980), &(0x7f00000019c0)=r4}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000001b80)={'syztnl2\x00', &(0x7f0000001b00)={'syztnl1\x00', 0x0, 0x20, 0x1, 0x40, 0x2, {{0x11, 0x4, 0x1, 0x32, 0x44, 0x67, 0x0, 0x7, 0x29, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0x91, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@empty, 0x5}, {@remote, 0xfffffffa}, {@broadcast, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x2}]}]}}}}}) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c00)={0x6, 0x5, &(0x7f0000001a40)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}], &(0x7f0000001a80)='GPL\x00', 0xa5, 0x3b, &(0x7f0000001ac0)=""/59, 0x41000, 0x7c, '\x00', r11, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[r9, r7], 0x0, 0x10, 0x16, @void, @value}, 0x94) sched_getattr(r5, &(0x7f0000001cc0)={0x38}, 0x38, 0x0) setgroups(0x0, &(0x7f0000001d00)) stat(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000001ec0)={{0x1, 0x1, 0x18, r12, {r13, r14}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001f00)={'batadv_slave_0\x00'}) 4m1.614036876s ago: executing program 5 (id=306): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x88, 0x2c, 0xd27, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff7, 0x9, 0x6, 0x6, 0xb87}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000080d}, 0x24000000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m1.590051346s ago: executing program 5 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000240)='./file1\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x80000, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0xfffffc98}]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x845, &(0x7f00000000c0)=ANY=[@ANYBLOB="e66c757368090000000000000073686f77657865002c8d7466383d322c00"], 0x0, 0x274, &(0x7f0000000780)="$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") mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0x1d}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001000000000019002000fe800000000000000000000000000000ac1e000100000000000000000000000000000000000000000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032"], 0x144}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000080)={0x5, 0xe2bf, 0x1}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r7, &(0x7f0000004200)='t', 0x1) 4m1.23077927s ago: executing program 5 (id=313): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0'}, 0xb) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file1', [{0x20, 'GPL\x00'}, {0x20, '#! '}, {0x20, 'GPL\x00'}], 0xa, "2240c4c242628d833ddc9cb147cd4b8fef93251889434d1e386f9378d34abf3d099d16d539340c10bb19c58755c263d0d36f85cd13ad45bdd5d009933ff23bf34622d7eb12bfef1766a0d4013082be6ce09528e578803296b0a65b0220299939df95024ede918a58afcf3e16d0a71f19061b1018cc09c1b8aa0e965f5b281526f3226078aefaf50093269a2f29e98ed399c330f561242e319778460b"}, 0xb5) write$UHID_INPUT(r0, &(0x7f0000002140)={0x8, {"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", 0x1000}}, 0x1006) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) fsync(r3) 4m0.935021475s ago: executing program 5 (id=318): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000340)={[{@lazytime}, {@stripe={'stripe', 0x3d, 0x2}}, {@errors_remount}, {@bsdgroups}, {@auto_da_alloc}, {@usrjquota}, {@nouid32}, {@block_validity}, {@nombcache}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r0, 0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x220c402, &(0x7f0000000b40)=ANY=[], 0x1, 0x6a5, &(0x7f00000013c0)="$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") memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x3000046, &(0x7f0000000cc0)={[{@stripe={'stripe', 0x3d, 0x9}}, {@data_err_abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xffff}}, {@nobarrier}, {@data_err_ignore}, {@mblk_io_submit}, {@resuid}, {@grpquota}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, 0x0, 0x0) get_robust_list(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000ec0)={[{@acl}, {@barrier}, {@barrier_val={'barrier', 0x3d, 0xffffffffffffffff}}, {@i_version}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@sb={'sb', 0x3d, 0xfffffffffffffff8}}, {@acl}, {@data_journal}]}, 0x0, 0x587, &(0x7f0000002100)="$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") sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 4m0.906376165s ago: executing program 33 (id=318): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000340)={[{@lazytime}, {@stripe={'stripe', 0x3d, 0x2}}, {@errors_remount}, {@bsdgroups}, {@auto_da_alloc}, {@usrjquota}, {@nouid32}, {@block_validity}, {@nombcache}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r0, 0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x220c402, &(0x7f0000000b40)=ANY=[], 0x1, 0x6a5, &(0x7f00000013c0)="$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") memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x3000046, &(0x7f0000000cc0)={[{@stripe={'stripe', 0x3d, 0x9}}, {@data_err_abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xffff}}, {@nobarrier}, {@data_err_ignore}, {@mblk_io_submit}, {@resuid}, {@grpquota}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, 0x0, 0x0) get_robust_list(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000ec0)={[{@acl}, {@barrier}, {@barrier_val={'barrier', 0x3d, 0xffffffffffffffff}}, {@i_version}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@sb={'sb', 0x3d, 0xfffffffffffffff8}}, {@acl}, {@data_journal}]}, 0x0, 0x587, &(0x7f0000002100)="$eJzs3U1rG9caAOB3ZMn5cO6NAyHcexeXQBZNSSPHdj9SKDRdljY00O5TYSsmWI6CJYfYDTRZNJtuSiiU0kDpD+i+y9A/0F8RaAOhBNMuSkFl5JGt2JIdOzJSoueBSc6ZD595feY9PqORUABD62T6Ty7ivxHxVRJxtG1bPrKNJ9f2W31yayZdkmg0Pv49iSRb19o/yf4fyyr/iYifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTb2uN4DrfbKydLf2elQlzYtONkDxobJEm/T4A9GcnyvBDpGHA0RrKsB15+n0dEY02uAQyZpJn/YxvjADAkWvOA1r19j+6DXxiP31u7AWrGPtoef37ttZE42Lw3OryaPHVnlN7vjveg/bSNn367fy9dYvvXIQ7tUAfYldt3IuJcPr91/E+y8W/vzjVfPN7e5jaG7e8P9NODdP7zWqf5X259/hMd5j9jHXJ3L3bO/9yjHjTTVTr/e6fj/Hd96BofyWr/as75CsmVq5XyuYj4d0ScjsKBtL7d85zzqw8b3ba1z//SJW2/NRfMzuNR/sDTx8yW6qWIGH2euFse34n4X75T/Ml6/ycd+j/9fVzq+BMLW9acKN//f7f2d45/fzV+iHilY/9vPNFKtn8+OdG8HiZaV8VWf9w98Uu39vsdf9r/h7ePfzxpf15b230b3x/8q9xt216v/9Hkk2a5lQQ3S/X64mTEaPJhs36wff3UxrGtemv/NP7Tp7Yf/zpd/+nN16fPGP/d43e77joI/T+7q/7ffeHhB5991639Z+v/15ul09mabPzrLLtWnvUEn/f3BwAAAAAAAIMkFxFHIskV18u5XLG49v6O43E4V6nW6meuVJeuzUbzs7LjUci1nnQfbXs/xGT2fthWfWpTfToijkXE1yOHmvXiTLUy2+/gAQAAAAAAAAAAAAAAAAAAYECMdfn8f+rXkX6fHbDvml9scKDfZwH0w45f+d+Lb3oCBtKO+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV0aq09uzaT12RvLS/PVG2dny7X54sLSTHGmuni9OFetzlXKxZnqwk4/r1KtXp+ciqWbE/VyrT5RW165vFBdula/fHWhNFe+XC5s7Jrb38gAAAAAAAAAAAAAAAAAAADgxVFbXpkvVSrlRYWuhXdjIE5jPwNcs6fD84MShUKXwp2se3d3VB8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY5J8AAAD//9ybLZI=") sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 3m24.223125219s ago: executing program 0 (id=919): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r3 = msgget$private(0x0, 0x0) msgrcv(r3, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgrcv(r3, &(0x7f0000000100)={0x0, ""/34}, 0x2a, 0x7, 0x2000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@measure}, {@smackfsfloor}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000400)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@mblk_io_submit}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x2}], {}, [], {0x10, 0x5}}, 0x34, 0x2) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r5}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d6664e35511289c3b34a455a8fe197f17a70d69a680cbe4e5e6b5d9fb80e791e4eb405c40c4d90207aed42e4c5d3599d14ebb41f8201f"]) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7046a0c03daab49cdd2ccb9000000000200850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0x30) 3m23.39135883s ago: executing program 0 (id=948): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x70bd29, 0xffa6, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) 3m23.318756611s ago: executing program 0 (id=951): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioperm(0x10, 0x6, 0x400) unshare(0x2040600) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4562d117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 3m23.293110161s ago: executing program 0 (id=952): futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x400, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x408, &(0x7f0000000740), 0x1, 0x57d, &(0x7f0000000d00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="186d660000009500"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='objagg_create\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) close(r2) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000440)=""/107) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) rt_sigprocmask(0x2, &(0x7f0000000000), 0x0, 0x8) r3 = gettid() timer_create(0x1, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, 0x0) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(0xffffffffffffffff, 0x1000000, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x100000000000003) fcntl$setsig(r5, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r6}], 0x2c, 0xffffffffffbffff8) dup2(r5, r6) fcntl$setown(r5, 0x8, r4) tkill(r4, 0x13) truncate(0x0, 0x2328) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 3m23.150877493s ago: executing program 0 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d00000004000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) semget(0x3, 0x1, 0x206) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x100000], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b4000000000400000f1000000000000063000000000000009500050000000000622167cc525a970268e17740a38f02925549625b01a53d0a078072b0e1"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) r6 = io_uring_setup(0x34d, &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x1c, 0x200000000000000, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x4, 0x26d, &(0x7f00000005c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x38ae, &(0x7f0000000340)={0x0, 0x52e4, 0x2, 0xfffffffc, 0xed, 0x0, r3}, &(0x7f0000000400), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) 3m22.685149589s ago: executing program 0 (id=962): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r3, 0x4008744b, 0xf0ff1f00000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0) 3m22.662516349s ago: executing program 34 (id=962): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r3, 0x4008744b, 0xf0ff1f00000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0) 3m21.132205609s ago: executing program 6 (id=987): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7") pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x2}, {0x8009, 0x56}], 0xee01}, 0x18, 0x0) 3m20.806602903s ago: executing program 6 (id=989): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0x0, 0x709, &(0x7f0000002000)="$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") pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 3m20.351855469s ago: executing program 6 (id=991): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) rmdir(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) pwritev(r2, &(0x7f0000000b40)=[{&(0x7f00000007c0)='\v', 0x1}], 0x1, 0xfaab, 0x1d) 3m19.301556853s ago: executing program 6 (id=993): r0 = socket$inet(0x2, 0x3, 0x2) pipe2(0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002202000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="080004"], 0x2c}}, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000700)=@gcm_256={{0x304}, "8df7eaeeabeca73d", "3840a42b9fafef394b4dde8409160c8d8c08b05c95d22bfdb075f310643ee709", '\x00', "00000000008000"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) write$binfmt_misc(r2, &(0x7f00000003c0)="28474ef926f856b0a1c9e338005ae177ce4f6c8a02486301bbaf077ecc100723", 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x39}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x3}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m18.562430673s ago: executing program 3 (id=998): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 3m18.460072504s ago: executing program 3 (id=1000): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0x0, 0x709, &(0x7f0000002000)="$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") pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 3m18.459625924s ago: executing program 3 (id=1001): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xc0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xa9, 0x71430, 0x0, 0x2, 0x3e5, 0xf8ad, 0x0, 0x0, 0x0, 0x3}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000300"/28], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={&(0x7f0000000280)="f2c1d4fa9003157d362c69e85cad7f8e13be0f11afbdad268f351556afda5a12529ddc732743a7d6bafc67821423dbc21556acd71ed848fcd89eb4eb814e66484e0c62d12c0862ceb005", &(0x7f0000000440)=""/161, &(0x7f0000000200)="3e2668422fac1ae829637db313584cc3b980295f261b3f3c345aee744b609fd6b1354f126848c10b704aec33862c39d3596def08bae9d862c8", &(0x7f0000000500)="ddf3b94de3316063a463820029dcb13af570fe5ca4b1acd51658dd68739b87ab6680ba3475583d45db5f9bc5e8c598d13b919e06b28ad35f6dbb194e178147b09b0ad7b88dc2334f8e036fcda724d09ac3e8870938afa1a6f164dd8f412c9c5d470324975ee59049cd235c4627184c8c4287131af4aa010df975c4b941520b5ced7d67f8637893ae6e9393cca2819520cb10", 0x0, r4}, 0x38) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) close(r3) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0x9}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x20) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 3m18.327263015s ago: executing program 6 (id=1002): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) rmdir(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) pwritev(r3, &(0x7f0000000b40)=[{&(0x7f00000007c0)='\v', 0x1}], 0x1, 0xfaab, 0x1d) 3m18.326801485s ago: executing program 3 (id=1003): r0 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') lseek(r0, 0xff, 0x0) getdents64(r0, 0xffffffffffffffff, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40ca, &(0x7f0000000040)={[{}]}, 0xfc, 0x496, &(0x7f0000000f40)="$eJzs3EtsG0UfAPD/Okn7fX0llPJoKRAoiIpH0qaF9oDEQ0LiAAgJDuVo0rQqdRvUBIlWEQ2oKhckqMQdgbggcebAiRMCTkhcOMAdVapQLxRORmvvGsexHdd14jx+P2nrGWfsmf/uzu7sTtcBbFij6T9JxLaI+C0ihiOi0FhgtPpy4/rc5N/X5yaTKJdf+zNJPxZ/XZ+bzIsm2evWamYwfSlcSuLZJvXOnL9wulgqTZ3L8uOzZ94enzl/4YlTZ4onp05OnZ04evTwoYNHnpp4sidx3pa2dc9703t3v/jGlZcnj11588evk7pG18fRG0MxX7dOGj3c28r6bntdOhlsW7Sw7I2hY5sjKh11qNL/h2Pg0o7a34bjhQ/62jhgWZXL5fJE6z/Pl4F1LIl+twDoj/xEn17/5ssKDT1WhWvPVS+A0rhvZEv1omewdqE61HB920tzEXFs/p/P0iWW5T4EAMBC36Xjn8ebjf8KcWdduR3Z3NBINpeyMyJuj4hdEXFHRKXsXRFx903WP9qQXzz+KVztKrAOpeO/p7O5rXzJ6s2LjAxkue2V+IeSE6dKUweydbI/hjan+YNNvz2JyiRQ/PJxq/pH68Z/6ZLWn48Fs3ZcHdy88DPHi7PFWw48c+39iD2DzeLPJvCyOazdEbGnyzpOPfrV3oXvDNRSS8ffRvt5po6UP494pLr956Mh/lzSfn5y/H9Rmjownu8Vi/308+VXW9V/S/H3QLr9tzTd/2vxjyT187Uzi75i01J1XP79w5bXNKMRz0QX+/+m5PUFlb9bnJ09dzBiU/LS4vfrbnDn+bx8Gv/+fc37/874b03cExHpTnxvRNwXEfdn2+6BiHgwIva1if+H5x96q038fd3+kR2hOtr++Xao7gi1PWKpxMDp779tVXlnx7/DldT+7J1Ojn+dNrDLdQYAAABrSiEitkVSGKulC4Wxser/4d8VWwql6ZnZx05Mv3P2ePUZgZEYKuR3uoazfGT3P0eq+crV90TlNeJidr/0UHbf+NOB/1fyY5PTpeP9Dh42uK0t+n/qj4F+tw5Ydj2YRwPWqHb9/4sjK9gQYMV1f/43coC1bole7AcbYB1zFoeNq1n/v9iHdgArr/X5f8rQANa5Wif/pIPCdY97NT68Caw9TvKwcS3d/19Zrt+/Avqn86f4V0siSRa8E19GtP9U0v82d5H4aHU0o3UiCquiGV0niqujGTeRGOz4Vy3Oly8WS6Vfv7mVSvt9ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiNfwMAAP//oefi4g==") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r6 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000100)='kfree\x00', r7, 0x0, 0x1000000}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='cpu>=0||!') r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$cgroup(0x0, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x18e887, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) close_range(r10, r11, 0x0) 3m17.869917291s ago: executing program 3 (id=1008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3m17.514370116s ago: executing program 3 (id=1013): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212000100000000090400000002060700000000000000ba0aa0fb46e803ba5e44"], 0x0) r1 = io_uring_setup(0xb2f, &(0x7f00000002c0)={0x0, 0x29bf, 0x80, 0x2, 0x1c}) r2 = syz_io_uring_setup(0x7b58, &(0x7f0000000c40)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r2, 0x92, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r8, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x622c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0x2}, 0x18) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000002100)={0x0, 0x4, 0x0, 0xfffffffe, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r11, 0xa, 0x13) fcntl$setlease(r11, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) fcntl$setlease(r5, 0x400, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r11, 0x400, 0x2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f000000e580)={0x0, 0x0, &(0x7f000000e540)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="b75b26070400fcdbdf250300000014000180060005004e210000080000e000000100"], 0x28}, 0x1, 0x0, 0x0, 0x20040810}, 0x24040000) 3m17.466253617s ago: executing program 35 (id=1013): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212000100000000090400000002060700000000000000ba0aa0fb46e803ba5e44"], 0x0) r1 = io_uring_setup(0xb2f, &(0x7f00000002c0)={0x0, 0x29bf, 0x80, 0x2, 0x1c}) r2 = syz_io_uring_setup(0x7b58, &(0x7f0000000c40)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r2, 0x92, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r8, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x622c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0x2}, 0x18) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000002100)={0x0, 0x4, 0x0, 0xfffffffe, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r11, 0xa, 0x13) fcntl$setlease(r11, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) fcntl$setlease(r5, 0x400, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r11, 0x400, 0x2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f000000e580)={0x0, 0x0, &(0x7f000000e540)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="b75b26070400fcdbdf250300000014000180060005004e210000080000e000000100"], 0x28}, 0x1, 0x0, 0x0, 0x20040810}, 0x24040000) 3m17.452380877s ago: executing program 6 (id=1016): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000e9adc7b600"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) 3m17.395451418s ago: executing program 36 (id=1016): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000e9adc7b600"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) 2m36.19243238s ago: executing program 8 (id=2011): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x9, @empty, 0x6}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x124, 0x5dd9, 0x0, 0x0, 0x0, 0x208, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000002040)=""/4079, 0xfef}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f00000037c0)=""/4080, 0xff0}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f0000000080)=""/21, 0x15}], 0x7}, 0x40002002) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2m36.061530812s ago: executing program 8 (id=2014): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4000000000002ab}, 0x18) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m36.059557152s ago: executing program 8 (id=2024): socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0xd0, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 2m36.008647263s ago: executing program 8 (id=2017): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x1}}, './file0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000840)=ANY=[@ANYRESDEC=r2, @ANYBLOB="556ebaa59c2555c372c728a20a1b1f3069"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000980)='mm_vmscan_wakeup_kswapd\x00', r0, 0x0, 0xfffffffffffffffc}, 0x5a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffeaa) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x1, 0x50a, &(0x7f0000000200)="$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") ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="b400000010000904edffffff0000000000002200", @ANYRES64=r0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r4], 0xb4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x70bd25, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x80) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r8, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001"], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000004000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xf, 0xc, &(0x7f0000000980)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000009000000000000008000f7cf000075", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000100)) 2m35.890786394s ago: executing program 8 (id=2022): ioperm(0x284, 0x7f, 0xe3) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x10, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0x13, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000100)=0x10, 0x80000) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) tee(r3, r4, 0x3, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) inotify_init() 2m35.687935987s ago: executing program 8 (id=2031): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) move_mount(0xffffffffffffff9c, &(0x7f0000000800)='./bus\x00', r0, &(0x7f0000000840)='./file0\x00', 0x64) 2m35.660245397s ago: executing program 37 (id=2031): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) move_mount(0xffffffffffffff9c, &(0x7f0000000800)='./bus\x00', r0, &(0x7f0000000840)='./file0\x00', 0x64) 2.515841678s ago: executing program 9 (id=3047): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.515416127s ago: executing program 4 (id=3049): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r2 = syz_io_uring_setup(0x5c3, &(0x7f0000000140)={0x0, 0x2, 0x1000, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x600, 0x1, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[], 0x15) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 2.367297149s ago: executing program 9 (id=3051): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000010000000010000000200000000000000", @ANYRES32, @ANYBLOB="000002000007000076f5728d511bda333cd2cf87858e00000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000500)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xa00440, &(0x7f00000001c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xc3c}}]}, 0x1, 0x4a6, &(0x7f0000000f80)="$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") r6 = socket(0x10, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x3, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r8}, &(0x7f0000000340), &(0x7f00000004c0)=r9}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r7, 0x2) close_range(r6, 0xffffffffffffffff, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) sendfile(r10, r10, 0x0, 0xe0000000) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x11) 2.247710251s ago: executing program 4 (id=3052): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x20441, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x54}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.176291112s ago: executing program 2 (id=3053): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1.984101834s ago: executing program 2 (id=3055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r1) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025ad0700000000000000000018000180140002006c6f0000000000000000000000000000378a8ed170228d9d88cb5148396d9300f26fdc271ed33d3d42a0d0450731c34a1a0f8d71384bf80bea5b296207727c4074ed64bf0e0ecdbc8d5543504cddcc7e6ba6baee8991d6c9233ae7c5a66e78c3a43d7d790435a71f6016af46cd963bbbdb00d7d36e7f902a"], 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20040000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100000300ffff0002000000000000b7030000ddffff411fe2a113ff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x41002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d6, 0x0, @perf_config_ext, 0x204c, 0x0, 0x92d, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5d, 0x1, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r9, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x4800) r10 = gettid() process_vm_writev(r10, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) unshare(0x28000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="090300000042dbdd58018ef710260bbe9ffb5806466aaff9f9131bdd5b73d678c935bcd20e4cf3239f26ef1bf58cfb4ca79439cef3d4dac3c7d09c0cf628e31ff5f6c60e436f797e792ed471979481dc88bc75cb690f5c88c60c632f494b2db89bef216469a0a787861b578a7335390d7974c3682fde2d6ba2b99156", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYRES64=r3], 0x50) 1.882768076s ago: executing program 9 (id=3057): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000010000000010000000200000000000000", @ANYRES32, @ANYBLOB="000002000007000076f5728d511bda333cd2cf87858e00000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000500)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xa00440, &(0x7f00000001c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xc3c}}]}, 0x1, 0x4a6, &(0x7f0000000f80)="$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") r6 = socket(0x10, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x3, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r8}, &(0x7f0000000340), &(0x7f00000004c0)=r9}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r7, 0x2) close_range(r6, 0xffffffffffffffff, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) sendfile(r10, r10, 0x0, 0xe0000000) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x11) 1.670708619s ago: executing program 7 (id=3063): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000180)=0x2858, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x16}]}) r2 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000400)='./file1\x00', 0x100004c, &(0x7f0000000080)={[{@block_validity}, {@jqfmt_vfsv1}, {@data_writeback}, {@abort}]}, 0x1, 0x553, &(0x7f0000001080)="$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") sched_setscheduler(r2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4400c0b0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1e, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffed7) r5 = dup2(0xffffffffffffffff, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x10a9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x4, r1, 0xf}, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x15, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1008040}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x4c, 0x6, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r8, &(0x7f0000004740)='\x00', &(0x7f0000004780)=ANY=[@ANYBLOB='\f'], &(0x7f00000047c0), 0x1200) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000003, 0x5d031, r8, 0x0) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) writev(r9, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[], 0x0) r11 = add_key$user(&(0x7f0000000f80), &(0x7f0000000fc0)={'syz', 0x3}, &(0x7f0000001000)='(', 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r11) keyctl$read(0xb, r11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) 1.5666589s ago: executing program 2 (id=3064): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r3 = gettid() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) tkill(r3, 0x12) r4 = gettid() tkill(r4, 0x15) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x123, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r10, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.467240021s ago: executing program 9 (id=3065): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x28, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x0, 0x3}) close(r2) 1.437582091s ago: executing program 9 (id=3066): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10, 0x800) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='sit0\x00') r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000300)=""/250) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000280)=0xfffffffa, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000002c0)=0x19, 0x0) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.362563292s ago: executing program 9 (id=3067): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x0, 0xf0, 0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7) socket$nl_route(0x10, 0x3, 0x0) sendmsg$xdp(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="8f5634b8dfea74d6b9", 0x9}], 0x1, 0x0, 0x0, 0x4c881}, 0x80) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {0x6}, {0x0, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000008540)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x10000000) io_cancel(0x0, 0x0, 0x0) 1.361681443s ago: executing program 4 (id=3068): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000007ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x1000000}, 0x20001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x28, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x0, 0x3}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r8, 0x5601, &(0x7f0000000200)) r9 = socket$vsock_stream(0x28, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$vsock_stream(r9, &(0x7f0000000440), 0x10) close(r5) 1.295240933s ago: executing program 4 (id=3069): mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000540)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ff90000000000000100000850000007b00000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="fc5691b0b7c78a372ec4b64e25a832a0ad4c963bfde6eada4c6705ece0131952de2dd24b1be5d0f7f21ae370af3009d073cece19f6e954696d3981aad7da9adfdb6ab61d4874409fc37c971f45a3ec3dd2ae62e344834325e8493216090002e01b16f6945bfd1c32bb4ccbd575355273e9cb89be1e859131dbdb0305f7ebc43aa4d471e12c4b4489946d0bc79cd6dc4fdbfb89a3e2248a7fd12c6b4a643789607735"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000ff0000000000faffff0318110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b3}) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0xf00, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='kfree\x00', r6}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r9}, 0x10) close(r2) 1.201228945s ago: executing program 4 (id=3070): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xa00) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x1}}) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) connect$unix(r7, &(0x7f0000002740)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4, 0x0, 0x1}, 0x18) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010000000000020000000000000000000000000000000080be2abb280f32e473c28a373c3c74060e8ff842ef886fe570e034591d1ce81562ac5c309041da57bea9cd7f4a149dce2556c782fe6a19a09b646e7800df22c1ff513baf1f826096cf919044e765361286a03399d891f81755f4f2ec06cebc21b99a85"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r9, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0xfffffffffffffffa, 0x2, 0x0, 0x0, 0x0, 0x400012, 0x0, 0x0, 0x0}}, 0x10) read$rfkill(r0, 0x0, 0x0) 1.057931036s ago: executing program 7 (id=3071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) move_mount(0xffffffffffffff9c, &(0x7f0000000800)='./bus\x00', r2, &(0x7f0000000840)='./file0\x00', 0x64) 1.021324277s ago: executing program 7 (id=3072): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) setrlimit(0x40000000000008, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 984.582237ms ago: executing program 7 (id=3073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) close(r0) 935.611408ms ago: executing program 7 (id=3074): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu>=0||!') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x22, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r6, 0x5) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) dup3(r7, r6, 0x0) 935.242498ms ago: executing program 1 (id=3075): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000200)=@gcm_128={{0x304}, "1760695e70069e81", "cc1f574caee1c480cb642bf97eac240b", "ad5f67c5", "0e5af5dc3b37d0f0"}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000040)=""/45, 0x2d, 0x0, &(0x7f00000002c0)=""/208, 0xd0}}, 0x10) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x9, 0x1, 0xa, 0x10}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='qgroup_meta_reserve\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) getrlimit(0x6, &(0x7f00000001c0)) 871.184438ms ago: executing program 1 (id=3076): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x10000) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xf7}, 0x18) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) 868.781999ms ago: executing program 1 (id=3077): fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000240)=[{{0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x3, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100200086dd60001bae0014060000000000000000000000ffffe0000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54c20300907800ff"], 0x0) getpid() sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4082}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x278dc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000040), &(0x7f0000000080)=r9}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@auto_da_alloc}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") 817.805449ms ago: executing program 7 (id=3078): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1a, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fbffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000008c0)='xen_mc_entry_alloc\x00', r0, 0x0, 0x7}, 0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@loopback, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="002dfa790fc064be5bf300000000000000000000000000310000000020468a5d8b00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x7}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000c822000000000000b3622dc272ad56ea1798a9b9619318910000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000080)=ANY=[], 0x68) recvmmsg(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/94, 0x5e}, 0x10000}], 0x1, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x200080d5, &(0x7f0000000300)={0xa, 0x4e1c, 0x4, @mcast2}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 751.27486ms ago: executing program 2 (id=3079): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) (async, rerun: 64) memfd_create(&(0x7f0000001f40)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xfa\xed\x04\x00\x00\x00\xd4N\x12;\x83-j\xa7\x02\x92\xecA\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4\xe1\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x19\b\x00\x00\x00\x00~\xf3S\x12\"\x00^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x00ZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99Y', 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) (async) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) (async) sendfile(r4, r4, 0x0, 0x1000000201005) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) (async, rerun: 32) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x9, 0xf, 0x1, 0xd5, 0x9, 0x101, 0xd, 0xb05, 0x0, 0x0, 0x100, 0xebfa, 0xc3e9, 0x1, 0x98, 0x7, 0xed, 0x2, 0xffffff7f, 0x6, 0x9, 0x2}}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000040) sendfile(r6, r5, 0x0, 0x7ffff000) (async) creat(&(0x7f0000000000)='./bus\x00', 0x8e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0], &(0x7f0000000340)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0xffffffffffffffb3) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000100), 0x3, 0x44a, &(0x7f0000000600)="$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") (rerun: 32) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 694.141881ms ago: executing program 2 (id=3080): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600}, 0x21) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r4, 0x0, 0x4ab}, 0x18) r5 = socket(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x493f, &(0x7f0000000500)={0x0, 0xba14, 0x20, 0x1, 0x28c}, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_enter(r6, 0x4525, 0xebba, 0x48, &(0x7f0000000400)={[0x520]}, 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0xfff1, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) 693.355091ms ago: executing program 2 (id=3081): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000800000000043af63c4e44229d800000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="020000007d0000df42aaf118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000001c0)={0x3, 0xb5626c0, 0x10, 0x5, 0xa, "f56cfe4802fd7933ac77a641be272441b6c111"}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 299.108236ms ago: executing program 4 (id=3082): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000800000000043af63c4e44229d800000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="020000007d0000df42aaf118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000001c0)={0x3, 0xb5626c0, 0x10, 0x5, 0xa, "f56cfe4802fd7933ac77a641be272441b6c111"}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 38.064689ms ago: executing program 1 (id=3083): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 17.93713ms ago: executing program 1 (id=3084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) close(r0) 0s ago: executing program 1 (id=3085): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) signalfd(r1, &(0x7f0000000200), 0x8) 0s ago: executing program 1 (id=3086): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x9, 0xffa4, 0xc00, 0x5}, 0x20) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bind$tipc(r7, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xbee}, 0x4c58, 0x10000, 0x0, 0x9, 0x4, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000001c0)='!=u&00\t&&') (async, rerun: 64) getresuid(&(0x7f00000002c0), &(0x7f0000000400), &(0x7f0000000440)) (rerun: 64) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x5072c21a66ddcdae, 0x63, 0x37, 0x63, 0x34, 0x61, 0x65], 0x2d, [0x39, 0x36, 0x33, 0x32], 0x2d, [0x61, 0x33, 0x63, 0x63], 0x2d, [0x62, 0x38, 0x39, 0x35], 0x2d, [0x38, 0x30, 0x31, 0x31, 0x33, 0x31, 0x35, 0x39]}}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") (async) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000400"], 0x44}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) (async, rerun: 64) execve(&(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)={[&(0x7f0000000100)=',\x00', &(0x7f0000000180)='\x00']}, &(0x7f0000000880)={[&(0x7f0000000200)='\x00', &(0x7f0000000280)='/\x00', &(0x7f00000002c0)='/\x00', &(0x7f0000000300)='((([\x00', &(0x7f0000000580)='debug_want_extra_isize', &(0x7f0000000680)='orlov', &(0x7f0000000800)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000900)='#\'\x00\x7f\x15\xba\x9bD\x05\r\xda\xac\xc4F(\xc0\x9a\x90zT\xd2)\x8a\x9be\xff[\xa3`\x04\xe4\xe99\x16\xa67y\xfe\xc6V|f\xd6\x95\x1f\x95\xc5\v\x8d\f\xd1\xac\r\xb6h\x9cb&*\xabVQ\xd1\x856Dh\xd3\f(\xfdE\x81\xc4k\x8f/\xbbg\xc3\x1bi\x89\xbe\xcdh\xd7\xee\x11I\xbc@\x8c?7\x06I\xc3\xd7RlO\x1d\xdf\x90e[a\x98\x94\xe7\x8f\x18JJ\xad\xd9\x87\xc4\xcf\\Z\x8b\x82;5\xce\xc3@\x8dc\x7f\v\xb54\xca1A\\)t\xc62\xdf\xb8V\xcd`\x1e<$]i\x9c\xfb\xa1\x8b\xdb@\xe0\xdf\xbc\xa8\x17\xb9\xa5\x80\xc8\xa7\xf4]~QX\xc3\x11{w\x9bb%<\xc1\x19\x83\xf8b']}) (async, rerun: 64) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0)=0x3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r6, @ANYRES16=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="160000000000000004000000010000000000000045fa7530e3a43c80acc2d95ae77d08b228746c384817fe739c3840927b03f5a6cadaaa67ddc2a871278740b89ed3327a730bf0c9ca093693b15b6c5a9419a0bf790b793236cfc875dc664604baae99a302849bf7d36fcab57dd6aaea65cffa6b3bc30cfbe43c2be8ff4243a19dab75c3b622ab196222faa867b5d7e86d2cfa02954aff079c0cd71fd0431a193e7bba", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): is enabled [ 147.215117][ T9205] EXT4-fs (loop8): orphan cleanup on readonly fs [ 147.223308][ T9205] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2017: bg 0: block 248: padding at end of block bitmap is not set [ 147.238066][ T9205] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.2017: Failed to acquire dquot type 1 [ 147.250295][ T9205] EXT4-fs (loop8): 1 truncate cleaned up [ 147.258783][ T9205] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.295483][ T6502] EXT4-fs error (device loop8): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 12 [ 147.307569][ T6502] EXT4-fs error (device loop8): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 12 [ 147.343155][ T9214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.401162][ T9221] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 147.519563][ T37] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.542341][ T9233] loop7: detected capacity change from 0 to 128 [ 147.584981][ T6318] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 147.593665][ T6318] FAT-fs (loop7): Filesystem has been set read-only [ 147.604030][ T37] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.640414][ T9238] loop7: detected capacity change from 0 to 512 [ 147.658851][ T37] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.686782][ T9238] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.707444][ T37] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.711815][ T9238] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.745890][ T9252] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 147.772177][ T9238] syz.7.2034 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 147.811389][ T9238] netlink: 'syz.7.2034': attribute type 10 has an invalid length. [ 147.823075][ T9235] lo speed is unknown, defaulting to 1000 [ 147.842431][ T9238] dummy0: entered promiscuous mode [ 147.848077][ T9238] $H: (slave dummy0): Enslaving as an active interface with an up link [ 147.861320][ T9256] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 147.875863][ T9238] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 147.902405][ T9238] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 147.915706][ T9238] EXT4-fs (loop7): This should not happen!! Data will be lost [ 147.915706][ T9238] [ 147.925606][ T9238] EXT4-fs (loop7): Total free blocks count 0 [ 147.931758][ T9238] EXT4-fs (loop7): Free/Dirty block details [ 147.937733][ T9238] EXT4-fs (loop7): free_blocks=65280 [ 147.943763][ T9238] EXT4-fs (loop7): dirty_blocks=1 [ 147.949048][ T9238] EXT4-fs (loop7): Block reservation details [ 147.955157][ T9238] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 147.974655][ T37] bridge_slave_1: left allmulticast mode [ 147.980413][ T37] bridge_slave_1: left promiscuous mode [ 147.986172][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.994364][ T37] bridge_slave_0: left allmulticast mode [ 147.994652][ T6318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.000086][ T37] bridge_slave_0: left promiscuous mode [ 148.014898][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.066249][ T9271] __nla_validate_parse: 6 callbacks suppressed [ 148.066269][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2044'. [ 148.071465][ T9273] loop7: detected capacity change from 0 to 512 [ 148.125784][ T9281] loop9: detected capacity change from 0 to 512 [ 148.133766][ T9281] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 148.145294][ T9281] EXT4-fs (loop9): 1 truncate cleaned up [ 148.151374][ T9281] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.168249][ T37] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.178276][ T37] bond_slave_0: left promiscuous mode [ 148.185019][ T37] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.194501][ T37] bond_slave_1: left promiscuous mode [ 148.200778][ T37] $H (unregistering): Released all slaves [ 148.250294][ T37] hsr_slave_0: left promiscuous mode [ 148.260360][ T9289] xt_hashlimit: max too large, truncated to 1048576 [ 148.269913][ T37] hsr_slave_1: left promiscuous mode [ 148.278836][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.286495][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.295850][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.304022][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.318140][ T37] veth1_vlan: left promiscuous mode [ 148.323650][ T37] veth0_vlan: left promiscuous mode [ 148.336192][ T9292] loop7: detected capacity change from 0 to 512 [ 148.353356][ T9292] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 148.372167][ T9294] Invalid ELF header magic: != ELF [ 148.377940][ T9292] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002] [ 148.389722][ T9292] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.2047: missing EA_INODE flag [ 148.401649][ T9292] EXT4-fs (loop7): Remounting filesystem read-only [ 148.411810][ T9292] EXT4-fs (loop7): 1 orphan inode deleted [ 148.418844][ T9292] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.434038][ T9292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.453498][ T37] team0 (unregistering): Port device team_slave_1 removed [ 148.463922][ T37] team0 (unregistering): Port device team_slave_0 removed [ 148.527021][ T9235] chnl_net:caif_netlink_parms(): no params data found [ 148.586037][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'. [ 148.615749][ T9235] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.623192][ T9235] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.630503][ T9235] bridge_slave_0: entered allmulticast mode [ 148.637051][ T9235] bridge_slave_0: entered promiscuous mode [ 148.644270][ T9235] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.651367][ T9235] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.658722][ T9235] bridge_slave_1: entered allmulticast mode [ 148.665493][ T9235] bridge_slave_1: entered promiscuous mode [ 148.686835][ T9235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.697239][ T9235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.697329][ T9317] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 148.726248][ T9235] team0: Port device team_slave_0 added [ 148.732991][ T9235] team0: Port device team_slave_1 added [ 148.759233][ T9235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.766301][ T9235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.792379][ T9235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.803810][ T9235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.810805][ T9235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.836923][ T9235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.871877][ T9235] hsr_slave_0: entered promiscuous mode [ 148.879403][ T9235] hsr_slave_1: entered promiscuous mode [ 148.954711][ T9327] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 148.954711][ T9327] program syz.1.2062 not setting count and/or reply_len properly [ 148.998969][ T6509] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.055754][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2067'. [ 149.067208][ T9339] netlink: 'syz.1.2067': attribute type 21 has an invalid length. [ 149.114009][ T9349] SELinux: syz.9.2072 (9349) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 149.228982][ T9361] loop9: detected capacity change from 0 to 512 [ 149.296908][ T9235] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.305027][ T9361] EXT4-fs (loop9): orphan cleanup on readonly fs [ 149.307013][ T9235] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.330077][ T9235] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.344171][ T9361] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2079: bg 0: block 248: padding at end of block bitmap is not set [ 149.361778][ T9361] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.2079: Failed to acquire dquot type 1 [ 149.376402][ T9361] EXT4-fs (loop9): 1 truncate cleaned up [ 149.383425][ T9361] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.540911][ T9368] lo speed is unknown, defaulting to 1000 [ 149.879551][ T6509] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.890132][ T9379] SELinux: syz.7.2085 (9379) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 149.911947][ T9235] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.954093][ T9383] loop9: detected capacity change from 0 to 512 [ 149.976834][ T9383] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.036257][ T9235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.043680][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 150.043693][ T29] audit: type=1400 audit(2000000011.420:9313): avc: denied { remount } for pid=9384 comm="syz.1.2087" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 150.050815][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2087'. [ 150.075860][ T9235] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.094095][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.101366][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.113915][ T3573] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.121017][ T3573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.131389][ T9383] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.156079][ T9235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.166623][ T9235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.177278][ T9383] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.192387][ T9383] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.265153][ T9383] can0: slcan on ttyS3. [ 150.274831][ T9387] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 150.293580][ T9235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.333807][ T9382] can0 (unregistered): slcan off ttyS3. [ 150.409962][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2092'. [ 150.418936][ T9410] bridge_slave_1: left allmulticast mode [ 150.425282][ T9410] bridge_slave_1: left promiscuous mode [ 150.430990][ T9410] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.501277][ T9410] bridge_slave_0: left allmulticast mode [ 150.507225][ T9410] bridge_slave_0: left promiscuous mode [ 150.513023][ T9410] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.819396][ T9235] veth0_vlan: entered promiscuous mode [ 150.877819][ T9235] veth1_vlan: entered promiscuous mode [ 150.989254][ T9235] veth0_macvtap: entered promiscuous mode [ 151.037643][ T9235] veth1_macvtap: entered promiscuous mode [ 151.090658][ T9235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.183287][ T9235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.203349][ T9235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.212141][ T9235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.220958][ T9235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.230373][ T9235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.276060][ T29] audit: type=1400 audit(2000000012.650:9314): avc: denied { mounton } for pid=9235 comm="syz-executor" path="/root/syzkaller.N3uNn3/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 151.313251][ T29] audit: type=1400 audit(2000000012.680:9315): avc: denied { mount } for pid=9235 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 151.335920][ T29] audit: type=1400 audit(2000000012.680:9316): avc: denied { mounton } for pid=9235 comm="syz-executor" path="/root/syzkaller.N3uNn3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 151.363368][ T29] audit: type=1400 audit(2000000012.680:9317): avc: denied { mounton } for pid=9235 comm="syz-executor" path="/root/syzkaller.N3uNn3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 151.413642][ T9435] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 151.440346][ T29] audit: type=1400 audit(2000000012.770:9318): avc: denied { mounton } for pid=9235 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 151.464027][ T29] audit: type=1400 audit(2000000012.770:9319): avc: denied { mount } for pid=9235 comm="syz-executor" name="/" dev="gadgetfs" ino=3797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 151.540646][ T9439] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 151.908884][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2102'. [ 151.931171][ T9443] loop9: detected capacity change from 0 to 512 [ 151.950048][ T29] audit: type=1400 audit(2000000013.310:9320): avc: denied { name_bind } for pid=9444 comm="syz.1.2103" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 151.972681][ T29] audit: type=1400 audit(2000000013.310:9321): avc: denied { node_bind } for pid=9444 comm="syz.1.2103" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 152.012589][ T9443] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 152.055219][ T9443] EXT4-fs (loop9): 1 truncate cleaned up [ 152.061443][ T9443] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.205299][ T9445] loop1: detected capacity change from 0 to 764 [ 152.216326][ T9445] Symlink component flag not implemented [ 152.232535][ T9445] Symlink component flag not implemented (7) [ 152.242120][ T6509] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.464641][ T9462] loop2: detected capacity change from 0 to 2048 [ 152.512183][ T9462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.537600][ T29] audit: type=1400 audit(2000000013.910:9322): avc: denied { mounton } for pid=9464 comm="syz.9.2111" path="/syzcgroup/unified/syz9" dev="cgroup2" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 152.563935][ T9465] SELinux: policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c [ 152.582645][ T9465] SELinux: failed to load policy [ 152.588019][ T9462] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 152.613667][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2114'. [ 152.634808][ T9235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.650007][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2115'. [ 152.654623][ T9460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.676493][ T9460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.700705][ T9479] unsupported nlmsg_type 40 [ 152.823862][ T9494] loop9: detected capacity change from 0 to 128 [ 152.895457][ T9498] SELinux: syz.2.2125 (9498) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 152.950192][ T6509] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 152.958950][ T6509] FAT-fs (loop9): Filesystem has been set read-only [ 152.989632][ T9502] pim6reg: entered allmulticast mode [ 153.004912][ T9505] pim6reg: left allmulticast mode [ 153.063449][ T9514] loop9: detected capacity change from 0 to 128 [ 153.070084][ T9514] vfat: Bad value for 'errors' [ 153.074630][ T9516] xt_hashlimit: max too large, truncated to 1048576 [ 153.091131][ T9518] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 153.091131][ T9518] program syz.7.2134 not setting count and/or reply_len properly [ 153.144959][ T9523] loop2: detected capacity change from 0 to 512 [ 153.152025][ T9523] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.163515][ T9523] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002] [ 153.174628][ T9523] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.2133: missing EA_INODE flag [ 153.187483][ T9523] EXT4-fs (loop2): Remounting filesystem read-only [ 153.194867][ T9523] EXT4-fs (loop2): 1 orphan inode deleted [ 153.201105][ T9523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.215473][ T9523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.261477][ T9532] loop1: detected capacity change from 0 to 128 [ 153.288116][ T3316] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 153.296857][ T3316] FAT-fs (loop1): Filesystem has been set read-only [ 153.301655][ T9536] loop7: detected capacity change from 0 to 512 [ 153.310271][ T9536] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.327778][ T9536] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.368897][ T9536] can0: slcan on ttyS3. [ 153.389056][ T9547] loop1: detected capacity change from 0 to 512 [ 153.397621][ T9547] EXT4-fs warning (device loop1): dx_probe:863: inode #2: comm syz.1.2145: dx entry: limit 1024 != root limit 124 [ 153.402959][ T9535] can0 (unregistered): slcan off ttyS3. [ 153.409755][ T9547] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.2145: Corrupt directory, running e2fsck is recommended [ 153.429278][ T9547] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 153.437657][ T9547] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.2145: corrupted in-inode xattr: invalid ea_ino [ 153.451290][ T9547] EXT4-fs (loop1): Remounting filesystem read-only [ 153.717876][ T9556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.726639][ T9556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.753809][ T9573] xt_hashlimit: max too large, truncated to 1048576 [ 153.819331][ T9574] loop7: detected capacity change from 0 to 512 [ 153.827395][ T9574] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 153.840382][ T9574] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002] [ 153.849588][ T9574] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.2157: missing EA_INODE flag [ 153.863603][ T9574] EXT4-fs (loop7): Remounting filesystem read-only [ 153.870224][ T9574] EXT4-fs (loop7): 1 orphan inode deleted [ 153.920719][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2161'. [ 153.959119][ T9588] loop9: detected capacity change from 0 to 527 [ 153.966151][ T9588] EXT4-fs (loop9): failed to parse options in superblock:  [ 153.979867][ T9588] EXT4-fs (loop9): Unsupported encryption level 4 [ 154.054621][ T9596] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.100979][ T9603] netlink: 'syz.9.2166': attribute type 4 has an invalid length. [ 154.104657][ T9602] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 154.108790][ T9603] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.2166'. [ 154.145318][ T9596] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.187725][ T9596] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.236710][ T9596] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.268759][ T9611] loop2: detected capacity change from 0 to 512 [ 154.278513][ T9611] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2173: bad orphan inode 15 [ 154.290034][ T9611] EXT4-fs (loop2): Remounting filesystem read-only [ 154.292121][ T9614] loop1: detected capacity change from 0 to 128 [ 154.296686][ T9611] ext4_test_bit(bit=14, block=18) = 1 [ 154.296704][ T9611] is_bad_inode(inode)=0 [ 154.296713][ T9611] NEXT_ORPHAN(inode)=1023 [ 154.312142][ T9596] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.312524][ T9611] max_ino=32 [ 154.320753][ T9596] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.325000][ T9611] i_nlink=0 [ 154.327461][ T9611] ext4 filesystem being mounted at /16/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 154.332734][ T9596] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.363377][ T9596] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.376220][ T3316] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 154.385088][ T3316] FAT-fs (loop1): Filesystem has been set read-only [ 154.459842][ T9620] SELinux: syz.2.2177 (9620) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 154.603869][ T9628] loop9: detected capacity change from 0 to 512 [ 154.613365][ T9628] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.2180: casefold flag without casefold feature [ 154.642038][ T9628] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.2180: couldn't read orphan inode 15 (err -117) [ 154.758205][ T9644] loop1: detected capacity change from 0 to 512 [ 154.777449][ T9644] EXT4-fs: Ignoring removed i_version option [ 154.787349][ T9653] SELinux: syz.9.2191 (9653) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 154.792764][ T9644] ext4: Unknown parameter 'obj_user' [ 154.884343][ T9670] loop2: detected capacity change from 0 to 256 [ 155.004335][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2202'. [ 155.020051][ T9673] loop9: detected capacity change from 0 to 2048 [ 155.027944][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2206'. [ 155.055378][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 155.055396][ T29] audit: type=1326 audit(2000000016.430:9653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9672 comm="syz.9.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7eff32a65927 code=0x7ffc0000 [ 155.087284][ T29] audit: type=1326 audit(2000000016.470:9654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9672 comm="syz.9.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff32a0ab39 code=0x7ffc0000 [ 155.110687][ T29] audit: type=1326 audit(2000000016.470:9655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9672 comm="syz.9.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7eff32a65927 code=0x7ffc0000 [ 155.134040][ T29] audit: type=1326 audit(2000000016.470:9656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9672 comm="syz.9.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff32a0ab39 code=0x7ffc0000 [ 155.152635][ T9673] loop9: p3 < > p4 < > [ 155.157481][ T29] audit: type=1326 audit(2000000016.470:9657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9672 comm="syz.9.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7eff32a6e969 code=0x7ffc0000 [ 155.161560][ T9673] loop9: partition table partially beyond EOD, truncated [ 155.188866][ T29] audit: type=1326 audit(2000000016.520:9658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1fa00e969 code=0x7ffc0000 [ 155.206854][ T9673] loop9: p3 start 4284289 is beyond EOD, truncated [ 155.216409][ T29] audit: type=1326 audit(2000000016.520:9659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1fa00e969 code=0x7ffc0000 [ 155.246418][ T29] audit: type=1326 audit(2000000016.520:9660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fc1fa00e969 code=0x7ffc0000 [ 155.270129][ T29] audit: type=1326 audit(2000000016.520:9661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1fa00e969 code=0x7ffc0000 [ 155.293941][ T29] audit: type=1326 audit(2000000016.520:9662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.2.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1fa00e969 code=0x7ffc0000 [ 155.340584][ T9704] SELinux: syz.9.2211 (9704) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 155.510846][ T9725] loop2: detected capacity change from 0 to 128 [ 155.560917][ T9235] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 155.570331][ T9235] FAT-fs (loop2): Filesystem has been set read-only [ 155.590355][ T9735] SELinux: syz.9.2226 (9735) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 155.609477][ T9733] hub 2-0:1.0: USB hub found [ 155.622697][ T9733] hub 2-0:1.0: 8 ports detected [ 155.679178][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2230'. [ 155.693185][ T9745] loop2: detected capacity change from 0 to 512 [ 155.701480][ T9745] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 155.730667][ T9745] EXT4-fs (loop2): 1 truncate cleaned up [ 155.758282][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2235'. [ 155.762012][ T9758] loop9: detected capacity change from 0 to 128 [ 155.793576][ T6509] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 155.802189][ T6509] FAT-fs (loop9): Filesystem has been set read-only [ 155.863495][ T9764] sd 0:0:1:0: device reset [ 155.872312][ T9764] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 155.900182][ T9772] SELinux: syz.9.2243 (9772) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 155.991992][ T9783] loop2: detected capacity change from 0 to 128 [ 156.009824][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2248'. [ 156.043592][ T9235] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 156.052160][ T9235] FAT-fs (loop2): Filesystem has been set read-only [ 156.062991][ T9786] SELinux: failed to load policy [ 156.112924][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2252'. [ 156.142108][ T9792] loop9: detected capacity change from 0 to 512 [ 156.150872][ T9792] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 156.175271][ T9792] EXT4-fs (loop9): 1 truncate cleaned up [ 156.226404][ T9770] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=38 sclass=netlink_audit_socket pid=9770 comm=syz.7.2242 [ 156.287723][ T9809] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 156.301725][ T9811] SELinux: syz.2.2258 (9811) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 156.366377][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2261'. [ 156.377402][ T9815] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 156.400964][ T9817] loop2: detected capacity change from 0 to 128 [ 156.459168][ T9235] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 156.467781][ T9235] FAT-fs (loop2): Filesystem has been set read-only [ 156.489764][ T9828] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2263'. [ 156.598962][ T9840] SELinux: syz.7.2272 (9840) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 156.631284][ T9851] loop1: detected capacity change from 0 to 128 [ 156.679446][ T3316] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 156.688215][ T3316] FAT-fs (loop1): Filesystem has been set read-only [ 156.712003][ T9855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9855 comm=syz.9.2279 [ 156.725243][ T9855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9855 comm=syz.9.2279 [ 156.760634][ T9862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.768144][ T9862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.779473][ T9862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.787118][ T9862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.801786][ T9863] __vm_enough_memory: pid: 9863, comm: syz.7.2282, bytes: 21199968759808 not enough memory for the allocation [ 156.839411][ T9863] lo speed is unknown, defaulting to 1000 [ 156.929646][ T9887] loop9: detected capacity change from 0 to 128 [ 156.951305][ T6509] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 156.959892][ T6509] FAT-fs (loop9): Filesystem has been set read-only [ 156.994849][ T9895] loop9: detected capacity change from 0 to 512 [ 157.001741][ T9895] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.019269][ T9898] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 157.019269][ T9898] program syz.7.2295 not setting count and/or reply_len properly [ 157.043587][ T9898] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.054015][ T9898] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.067689][ T9895] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.115903][ T9898] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.126357][ T9898] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.137008][ T9904] loop9: detected capacity change from 0 to 512 [ 157.144063][ T9904] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.164468][ T9904] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.195268][ T9898] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.205837][ T9898] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.219192][ T9904] can0: slcan on ttyS3. [ 157.264825][ T9898] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.275168][ T9898] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.282650][ T9903] can0 (unregistered): slcan off ttyS3. [ 157.330268][ T9898] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.338649][ T9898] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.350413][ T9898] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.358768][ T9898] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.370749][ T9898] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.379859][ T9898] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.391985][ T9898] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.400305][ T9898] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.414235][ T9913] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 157.665247][ T9938] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 157.691266][ T9944] loop9: detected capacity change from 0 to 2048 [ 157.706352][ T9944] ext3: Unknown parameter 'noacl' [ 157.824648][ T9958] loop1: detected capacity change from 0 to 512 [ 157.850553][ T9958] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 157.871041][ T9958] EXT4-fs (loop1): mount failed [ 157.918757][ T9958] FAULT_INJECTION: forcing a failure. [ 157.918757][ T9958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.932087][ T9958] CPU: 0 UID: 0 PID: 9958 Comm: syz.1.2322 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 157.932115][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 157.932129][ T9958] Call Trace: [ 157.932136][ T9958] [ 157.932146][ T9958] __dump_stack+0x1d/0x30 [ 157.932208][ T9958] dump_stack_lvl+0xe8/0x140 [ 157.932275][ T9958] dump_stack+0x15/0x1b [ 157.932291][ T9958] should_fail_ex+0x265/0x280 [ 157.932328][ T9958] should_fail+0xb/0x20 [ 157.932358][ T9958] should_fail_usercopy+0x1a/0x20 [ 157.932394][ T9958] _copy_from_user+0x1c/0xb0 [ 157.932417][ T9958] ___sys_sendmsg+0xc1/0x1d0 [ 157.932520][ T9958] __x64_sys_sendmsg+0xd4/0x160 [ 157.932555][ T9958] x64_sys_call+0x2999/0x2fb0 [ 157.932584][ T9958] do_syscall_64+0xd0/0x1a0 [ 157.932609][ T9958] ? clear_bhb_loop+0x40/0x90 [ 157.932724][ T9958] ? clear_bhb_loop+0x40/0x90 [ 157.932747][ T9958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.932769][ T9958] RIP: 0033:0x7fbdb7b8e969 [ 157.932785][ T9958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.932804][ T9958] RSP: 002b:00007fbdb61f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.932863][ T9958] RAX: ffffffffffffffda RBX: 00007fbdb7db5fa0 RCX: 00007fbdb7b8e969 [ 157.932876][ T9958] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000005 [ 157.932888][ T9958] RBP: 00007fbdb61f7090 R08: 0000000000000000 R09: 0000000000000000 [ 157.932901][ T9958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.932959][ T9958] R13: 0000000000000000 R14: 00007fbdb7db5fa0 R15: 00007ffd00152da8 [ 157.932979][ T9958] [ 158.347323][T10001] xt_hashlimit: max too large, truncated to 1048576 [ 158.417646][T10013] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 33554432, id = 0 [ 158.428617][T10011] IPVS: stopping master sync thread 10013 ... [ 158.458464][T10014] loop7: detected capacity change from 0 to 512 [ 158.487002][T10014] EXT4-fs (loop7): too many log groups per flexible block group [ 158.495051][T10014] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 158.508192][T10014] EXT4-fs (loop7): mount failed [ 158.531041][T10014] netlink: 'syz.7.2342': attribute type 13 has an invalid length. [ 158.620464][T10038] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 158.688738][T10043] loop2: detected capacity change from 0 to 512 [ 158.695916][T10043] EXT4-fs: Ignoring removed oldalloc option [ 158.714267][T10043] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.2354: Parent and EA inode have the same ino 15 [ 158.727088][T10043] EXT4-fs (loop2): Remounting filesystem read-only [ 158.733685][T10043] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 158.744101][T10043] EXT4-fs (loop2): 1 orphan inode deleted [ 158.752378][T10043] EXT4-fs (loop2): shut down requested (0) [ 158.792320][T10047] FAULT_INJECTION: forcing a failure. [ 158.792320][T10047] name failslab, interval 1, probability 0, space 0, times 0 [ 158.805664][T10047] CPU: 0 UID: 0 PID: 10047 Comm: syz.2.2355 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 158.805700][T10047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 158.805714][T10047] Call Trace: [ 158.805721][T10047] [ 158.805728][T10047] __dump_stack+0x1d/0x30 [ 158.805751][T10047] dump_stack_lvl+0xe8/0x140 [ 158.805798][T10047] dump_stack+0x15/0x1b [ 158.805820][T10047] should_fail_ex+0x265/0x280 [ 158.805865][T10047] should_failslab+0x8c/0xb0 [ 158.805907][T10047] kmem_cache_alloc_node_noprof+0x57/0x320 [ 158.805936][T10047] ? __alloc_skb+0x101/0x320 [ 158.806131][T10047] __alloc_skb+0x101/0x320 [ 158.806183][T10047] alloc_skb_with_frags+0x7d/0x470 [ 158.806234][T10047] ? selinux_file_open+0x31c/0x370 [ 158.806290][T10047] ? __rcu_read_unlock+0x4f/0x70 [ 158.806337][T10047] sock_alloc_send_pskb+0x43a/0x4f0 [ 158.806364][T10047] ? terminate_walk+0x27f/0x2a0 [ 158.806474][T10047] tun_get_user+0x8c0/0x24d0 [ 158.806506][T10047] ? ref_tracker_alloc+0x1f2/0x2f0 [ 158.806548][T10047] ? avc_policy_seqno+0x15/0x30 [ 158.806576][T10047] tun_chr_write_iter+0x15e/0x210 [ 158.806677][T10047] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 158.806709][T10047] vfs_write+0x4a0/0x8d0 [ 158.806751][T10047] ksys_write+0xda/0x1a0 [ 158.806787][T10047] __x64_sys_write+0x40/0x50 [ 158.806812][T10047] x64_sys_call+0x2cdd/0x2fb0 [ 158.806832][T10047] do_syscall_64+0xd0/0x1a0 [ 158.806854][T10047] ? clear_bhb_loop+0x40/0x90 [ 158.806954][T10047] ? clear_bhb_loop+0x40/0x90 [ 158.806974][T10047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.807046][T10047] RIP: 0033:0x7fc1fa00e969 [ 158.807060][T10047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.807077][T10047] RSP: 002b:00007fc1f8677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.807094][T10047] RAX: ffffffffffffffda RBX: 00007fc1fa235fa0 RCX: 00007fc1fa00e969 [ 158.807105][T10047] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 158.807176][T10047] RBP: 00007fc1f8677090 R08: 0000000000000000 R09: 0000000000000000 [ 158.807187][T10047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.807198][T10047] R13: 0000000000000000 R14: 00007fc1fa235fa0 R15: 00007ffc9af81278 [ 158.807216][T10047] [ 159.057674][T10049] SELinux: syz.2.2356 (10049) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 159.160567][T10060] loop1: detected capacity change from 0 to 512 [ 159.167582][T10060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.184232][T10060] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.245027][T10060] can0: slcan on ttyS3. [ 159.292711][T10058] can0 (unregistered): slcan off ttyS3. [ 159.349396][T10076] SELinux: syz.9.2367 (10076) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 159.409219][T10082] loop1: detected capacity change from 0 to 1024 [ 159.421713][T10080] ref_ctr_offset mismatch. inode: 0xa73 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 159.455376][T10082] EXT4-fs (loop1): failed to initialize system zone (-117) [ 159.464509][T10082] EXT4-fs (loop1): mount failed [ 159.528756][T10097] xt_hashlimit: max too large, truncated to 1048576 [ 159.546160][T10101] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 159.595270][T10103] loop1: detected capacity change from 0 to 512 [ 159.602112][T10103] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 159.623675][T10103] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002] [ 159.632412][T10103] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.2376: missing EA_INODE flag [ 159.646148][T10103] EXT4-fs (loop1): Remounting filesystem read-only [ 159.652872][T10103] EXT4-fs (loop1): 1 orphan inode deleted [ 159.671792][T10109] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 159.692725][T10111] SELinux: syz.9.2381 (10111) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 159.870475][T10123] loop9: detected capacity change from 0 to 2048 [ 159.883648][T10123] EXT4-fs (loop9): failed to initialize system zone (-117) [ 159.891032][T10123] EXT4-fs (loop9): mount failed [ 159.934327][T10129] loop9: detected capacity change from 0 to 512 [ 160.003402][T10138] SELinux: syz.7.2392 (10138) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 160.107926][T10151] loop9: detected capacity change from 0 to 512 [ 160.127399][T10156] __nla_validate_parse: 9 callbacks suppressed [ 160.127415][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2400'. [ 160.143088][T10151] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.2398: bad orphan inode 15 [ 160.154248][T10151] EXT4-fs (loop9): Remounting filesystem read-only [ 160.157789][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2401'. [ 160.160774][T10151] ext4_test_bit(bit=14, block=18) = 1 [ 160.160789][T10151] is_bad_inode(inode)=0 [ 160.160798][T10151] NEXT_ORPHAN(inode)=1023 [ 160.160807][T10151] max_ino=32 [ 160.160815][T10151] i_nlink=0 [ 160.201065][T10151] ext4 filesystem being mounted at /263/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 160.220564][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 160.220583][ T29] audit: type=1400 audit(2000000021.590:9973): avc: denied { setopt } for pid=10163 comm="syz.2.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.252143][ T29] audit: type=1326 audit(2000000021.620:9974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10150 comm="syz.9.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff32a6e969 code=0x7ffc0000 [ 160.275814][ T29] audit: type=1326 audit(2000000021.620:9975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10150 comm="syz.9.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff32a6e969 code=0x7ffc0000 [ 160.299414][ T29] audit: type=1326 audit(2000000021.620:9976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10150 comm="syz.9.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff32a6e969 code=0x7ffc0000 [ 160.322980][ T29] audit: type=1326 audit(2000000021.620:9977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10150 comm="syz.9.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff32a6e969 code=0x7ffc0000 [ 160.346492][ T29] audit: type=1326 audit(2000000021.620:9978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10150 comm="syz.9.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff32a6e969 code=0x7ffc0000 [ 160.371554][ T29] audit: type=1400 audit(2000000021.750:9979): avc: denied { sqpoll } for pid=10166 comm="syz.7.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 160.497686][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2412'. [ 160.517745][T10188] loop1: detected capacity change from 0 to 512 [ 160.526276][T10188] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.535903][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2411'. [ 160.555407][T10188] EXT4-fs: Mount option(s) incompatible with ext3 [ 160.568802][ T29] audit: type=1326 audit(2000000021.940:9980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10181 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1fa00e969 code=0x7ffc0000 [ 160.592518][ T29] audit: type=1326 audit(2000000021.940:9981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10181 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1fa00e969 code=0x7ffc0000 [ 160.619447][ T29] audit: type=1326 audit(2000000022.000:9982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10181 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fc1fa00e969 code=0x7ffc0000 [ 160.654450][T10193] FAULT_INJECTION: forcing a failure. [ 160.654450][T10193] name failslab, interval 1, probability 0, space 0, times 0 [ 160.667193][T10193] CPU: 0 UID: 0 PID: 10193 Comm: syz.9.2416 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 160.667220][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 160.667278][T10193] Call Trace: [ 160.667285][T10193] [ 160.667292][T10193] __dump_stack+0x1d/0x30 [ 160.667314][T10193] dump_stack_lvl+0xe8/0x140 [ 160.667336][T10193] dump_stack+0x15/0x1b [ 160.667391][T10193] should_fail_ex+0x265/0x280 [ 160.667436][T10193] should_failslab+0x8c/0xb0 [ 160.667500][T10193] kmem_cache_alloc_noprof+0x50/0x310 [ 160.667522][T10193] ? audit_log_start+0x365/0x6c0 [ 160.667555][T10193] audit_log_start+0x365/0x6c0 [ 160.667590][T10193] audit_seccomp+0x48/0x100 [ 160.667672][T10193] ? __seccomp_filter+0x68c/0x10d0 [ 160.667698][T10193] __seccomp_filter+0x69d/0x10d0 [ 160.667730][T10193] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 160.667795][T10193] ? vfs_write+0x75e/0x8d0 [ 160.667824][T10193] ? __rcu_read_unlock+0x4f/0x70 [ 160.667847][T10193] ? __fget_files+0x184/0x1c0 [ 160.667920][T10193] __secure_computing+0x82/0x150 [ 160.667972][T10193] syscall_trace_enter+0xcf/0x1e0 [ 160.667997][T10193] do_syscall_64+0xaa/0x1a0 [ 160.668021][T10193] ? clear_bhb_loop+0x40/0x90 [ 160.668049][T10193] ? clear_bhb_loop+0x40/0x90 [ 160.668160][T10193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.668189][T10193] RIP: 0033:0x7eff32a6e969 [ 160.668209][T10193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.668246][T10193] RSP: 002b:00007eff310d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 160.668265][T10193] RAX: ffffffffffffffda RBX: 00007eff32c95fa0 RCX: 00007eff32a6e969 [ 160.668292][T10193] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffffffffffff [ 160.668309][T10193] RBP: 00007eff310d7090 R08: 0000000000000000 R09: 0000000000000000 [ 160.668321][T10193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.668337][T10193] R13: 0000000000000000 R14: 00007eff32c95fa0 R15: 00007ffc371a3148 [ 160.668411][T10193] [ 160.929465][T10212] xt_hashlimit: max too large, truncated to 1048576 [ 160.984723][T10220] No such timeout policy "syz1" [ 161.005282][T10227] loop1: detected capacity change from 0 to 512 [ 161.023124][T10227] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.048096][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2429'. [ 161.058393][T10227] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002] [ 161.070955][T10227] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.2423: missing EA_INODE flag [ 161.099254][T10227] EXT4-fs (loop1): Remounting filesystem read-only [ 161.125831][T10234] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 161.133341][T10227] EXT4-fs (loop1): 1 orphan inode deleted [ 161.186384][T10238] loop9: detected capacity change from 0 to 512 [ 161.193949][T10238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.225464][T10238] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.277101][T10238] can0: slcan on ttyS3. [ 161.433469][T10237] can0 (unregistered): slcan off ttyS3. [ 161.547060][T10268] netlink: 'syz.2.2444': attribute type 2 has an invalid length. [ 161.554967][T10268] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2444'. [ 161.598344][T10270] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 161.915138][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2450'. [ 162.001617][T10282] tap0: tun_chr_ioctl cmd 1074025677 [ 162.038829][T10282] tap0: linktype set to 773 [ 162.086262][T10285] smc: net device bond0 applied user defined pnetid SYZ2 [ 162.105768][T10282] smc: net device bond0 erased user defined pnetid SYZ2 [ 162.124749][T10282] pimreg: entered allmulticast mode [ 162.131778][T10282] pimreg: left allmulticast mode [ 162.265639][T10291] $H: left promiscuous mode [ 162.270481][T10291] bond_slave_0: left promiscuous mode [ 162.276924][T10291] bond_slave_1: left promiscuous mode [ 162.341419][T10291] 8021q: adding VLAN 0 to HW filter on device $H [ 162.397283][T10291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.591707][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2457'. [ 162.611730][T10299] SELinux: syz.4.2456 (10299) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 162.909709][T10320] loop9: detected capacity change from 0 to 1024 [ 162.945554][T10320] EXT4-fs mount: 30 callbacks suppressed [ 162.945573][T10320] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.001354][T10320] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.061513][T10331] loop2: detected capacity change from 0 to 512 [ 163.085899][ T6509] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.097544][T10331] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.131582][T10331] EXT4-fs (loop2): 1 truncate cleaned up [ 163.146257][T10331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.252293][ T9235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.287459][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2470'. [ 163.549248][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2469'. [ 163.627496][T10353] loop2: detected capacity change from 0 to 512 [ 163.642681][T10353] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.689887][T10353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.703373][T10353] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.736738][T10349] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 163.783633][T10370] xt_hashlimit: max too large, truncated to 1048576 [ 163.783852][ T9235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.806936][T10375] netlink: 'syz.7.2482': attribute type 298 has an invalid length. [ 163.836307][T10375] lo speed is unknown, defaulting to 1000 [ 163.865277][T10380] loop1: detected capacity change from 0 to 512 [ 163.875980][T10380] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 163.890401][T10380] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002] [ 163.908207][T10380] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.2480: missing EA_INODE flag [ 163.925266][T10380] EXT4-fs (loop1): Remounting filesystem read-only [ 163.934666][T10380] EXT4-fs (loop1): 1 orphan inode deleted [ 163.940819][T10380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.956635][T10380] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.055774][T10388] lo speed is unknown, defaulting to 1000 [ 164.133169][T10404] lo speed is unknown, defaulting to 1000 [ 164.420035][T10430] loop2: detected capacity change from 0 to 512 [ 164.423219][T10433] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 164.428621][T10430] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 164.435145][T10433] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 164.457302][T10430] EXT4-fs (loop2): 1 truncate cleaned up [ 164.465509][T10430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.564672][ T9235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.849681][T10465] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 164.862280][T10467] loop1: detected capacity change from 0 to 512 [ 164.896154][T10467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.914212][T10467] ext4 filesystem being mounted at /485/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.935921][T10467] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.2511: corrupted inode contents [ 164.950160][T10477] loop2: detected capacity change from 0 to 1024 [ 164.963388][T10467] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.2511: mark_inode_dirty error [ 164.963958][T10477] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 164.986318][T10477] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 165.001364][T10467] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.2511: corrupted inode contents [ 165.022032][T10477] JBD2: no valid journal superblock found [ 165.023775][T10467] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.2511: mark_inode_dirty error [ 165.028630][T10477] EXT4-fs (loop2): Could not load journal inode [ 165.118931][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.130247][T10486] xt_hashlimit: max too large, truncated to 1048576 [ 165.137758][T10487] __nla_validate_parse: 8 callbacks suppressed [ 165.137774][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2515'. [ 165.175278][T10493] FAULT_INJECTION: forcing a failure. [ 165.175278][T10493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.188515][T10493] CPU: 0 UID: 0 PID: 10493 Comm: +}[@ Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 165.188611][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 165.188629][T10493] Call Trace: [ 165.188637][T10493] [ 165.188646][T10493] __dump_stack+0x1d/0x30 [ 165.188671][T10493] dump_stack_lvl+0xe8/0x140 [ 165.188698][T10493] dump_stack+0x15/0x1b [ 165.188723][T10493] should_fail_ex+0x265/0x280 [ 165.188759][T10493] should_fail+0xb/0x20 [ 165.188831][T10493] should_fail_usercopy+0x1a/0x20 [ 165.188855][T10493] _copy_from_user+0x1c/0xb0 [ 165.188878][T10493] __sys_bpf+0x178/0x790 [ 165.188927][T10493] __x64_sys_bpf+0x41/0x50 [ 165.188984][T10493] x64_sys_call+0x2478/0x2fb0 [ 165.189009][T10493] do_syscall_64+0xd0/0x1a0 [ 165.189079][T10493] ? clear_bhb_loop+0x40/0x90 [ 165.189107][T10493] ? clear_bhb_loop+0x40/0x90 [ 165.189136][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.189141][T10491] loop1: detected capacity change from 0 to 2048 [ 165.189165][T10493] RIP: 0033:0x7fc1fa00e969 [ 165.189184][T10493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.189329][T10493] RSP: 002b:00007fc1f8677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.189356][T10493] RAX: ffffffffffffffda RBX: 00007fc1fa235fa0 RCX: 00007fc1fa00e969 [ 165.189374][T10493] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000002 [ 165.189391][T10493] RBP: 00007fc1f8677090 R08: 0000000000000000 R09: 0000000000000000 [ 165.189408][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.189502][T10493] R13: 0000000000000000 R14: 00007fc1fa235fa0 R15: 00007ffc9af81278 [ 165.189529][T10493] [ 165.275214][T10501] loop9: detected capacity change from 0 to 512 [ 165.361655][T10491] lo speed is unknown, defaulting to 1000 [ 165.394796][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'. [ 165.403476][T10501] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 165.403787][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'. [ 165.423042][T10501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002] [ 165.432006][T10505] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 165.447002][T10501] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #11: comm syz.9.2516: missing EA_INODE flag [ 165.465482][T10501] EXT4-fs (loop9): Remounting filesystem read-only [ 165.472238][T10501] EXT4-fs (loop9): 1 orphan inode deleted [ 165.475027][T10512] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 165.481163][T10501] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.498089][T10501] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.504409][T10505] loop7: detected capacity change from 0 to 2048 [ 165.518154][T10514] siw: device registration error -23 [ 165.524511][T10505] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.528380][T10514] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2525'. [ 165.539045][ T29] kauditd_printk_skb: 688 callbacks suppressed [ 165.539064][ T29] audit: type=1400 audit(2000000026.920:10669): avc: denied { mounton } for pid=10504 comm="syz.7.2523" path="/337/file0/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.553372][T10505] xt_hashlimit: max too large, truncated to 1048576 [ 165.579297][ T29] audit: type=1400 audit(2000000026.930:10670): avc: denied { search } for pid=10504 comm="syz.7.2523" name="/" dev="configfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.611743][ T29] audit: type=1400 audit(2000000026.970:10671): avc: denied { read } for pid=10504 comm="syz.7.2523" name="/" dev="configfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.649964][ T6318] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 165.664819][ T29] audit: type=1400 audit(2000000027.020:10672): avc: denied { remove_name } for pid=6318 comm="syz-executor" name="lost+found" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.688500][ T29] audit: type=1400 audit(2000000027.020:10673): avc: denied { rmdir } for pid=6318 comm="syz-executor" name="lost+found" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.725595][T10520] loop1: detected capacity change from 0 to 512 [ 165.732864][ T29] audit: type=1400 audit(2000000027.100:10674): avc: denied { unlink } for pid=6318 comm="syz-executor" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 165.739160][ T6318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.756264][ T29] audit: type=1400 audit(2000000027.100:10675): avc: denied { unlink } for pid=6318 comm="syz-executor" name="file1" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 165.791591][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2529'. [ 165.898983][T10540] loop7: detected capacity change from 0 to 512 [ 165.907023][T10540] EXT4-fs: Mount option(s) incompatible with ext3 [ 165.910489][T10541] 9pnet_fd: Insufficient options for proto=fd [ 165.935928][T10543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2536'. [ 166.132074][T10548] xt_TPROXY: Can be used only with -p tcp or -p udp [ 166.139438][T10540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.154996][T10540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.166288][T10548] loop9: detected capacity change from 0 to 2048 [ 166.175053][T10548] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.181700][T10548] ext4: Unknown parameter 'nouser_xattr' [ 166.196422][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2540'. [ 166.231031][T10560] : renamed from vlan0 (while UP) [ 166.239539][T10556] loop9: detected capacity change from 0 to 512 [ 166.246818][T10556] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 166.270019][T10556] EXT4-fs (loop9): 1 truncate cleaned up [ 166.277346][T10556] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.330462][ T6509] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.382800][ T29] audit: type=1326 audit(2000000027.750:10676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.9.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff32a6e969 code=0x7ffc0000 [ 166.414780][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2544'. [ 166.415887][ T29] audit: type=1326 audit(2000000027.780:10677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.9.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7eff32a6e969 code=0x7ffc0000 [ 166.447492][ T29] audit: type=1326 audit(2000000027.780:10678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10565 comm="syz.9.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff32a6e969 code=0x7ffc0000 [ 166.541282][T10569] loop9: detected capacity change from 0 to 512 [ 166.581997][T10569] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.596291][T10569] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.612507][T10569] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #18: comm syz.9.2545: corrupted inode contents [ 166.625208][T10569] EXT4-fs error (device loop9): ext4_dirty_inode:6103: inode #18: comm syz.9.2545: mark_inode_dirty error [ 166.637750][T10569] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #18: comm syz.9.2545: corrupted inode contents [ 166.651574][T10569] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2991: inode #18: comm syz.9.2545: mark_inode_dirty error [ 166.666332][T10569] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2994: inode #18: comm syz.9.2545: mark inode dirty (error -117) [ 166.679436][T10569] EXT4-fs warning (device loop9): ext4_evict_inode:279: xattr delete (err -117) [ 166.714637][ T6509] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.771124][T10575] xt_hashlimit: max too large, truncated to 1048576 [ 166.781221][T10573] SELinux: syz.7.2547 (10573) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 166.895054][T10582] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 166.908326][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2551'. [ 166.917343][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2551'. [ 167.008844][T10588] tipc: Started in network mode [ 167.013910][T10588] tipc: Node identity f67223dff182, cluster identity 4711 [ 167.021180][T10588] tipc: Enabled bearer , priority 0 [ 167.036690][T10587] tipc: Disabling bearer [ 167.351078][T10611] SELinux: syz.9.2561 (10611) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 167.431977][T10620] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 167.461768][T10622] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 167.508495][T10624] openvswitch: netlink: Flow key attr not present in new flow. [ 167.690865][T10636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.699530][T10636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.739300][T10641] SELinux: syz.4.2572 (10641) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 167.793356][T10634] loop9: detected capacity change from 0 to 2048 [ 167.822017][T10634] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 167.828636][T10634] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 167.836624][T10634] vhci_hcd vhci_hcd.0: Device attached [ 167.846506][T10634] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(9) [ 167.853031][T10634] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 167.863074][T10634] vhci_hcd vhci_hcd.0: Device attached [ 167.872026][T10634] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 167.883854][T10634] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(13) [ 167.890515][T10634] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 167.898521][T10634] vhci_hcd vhci_hcd.0: Device attached [ 167.908605][T10634] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(15) [ 167.915215][T10634] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 167.925844][T10634] vhci_hcd vhci_hcd.0: Device attached [ 167.935331][T10634] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 167.948715][T10634] vhci_hcd vhci_hcd.0: pdev(9) rhport(6) sockfd(19) [ 167.955340][T10634] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 167.963616][T10634] vhci_hcd vhci_hcd.0: Device attached [ 167.973103][T10634] vhci_hcd vhci_hcd.0: pdev(9) rhport(7) sockfd(21) [ 167.979782][T10634] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 167.980875][T10643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.995974][T10643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.007182][T10634] vhci_hcd vhci_hcd.0: Device attached [ 168.037304][ T10] vhci_hcd: vhci_device speed not set [ 168.072086][T10656] loop9: detected capacity change from 0 to 512 [ 168.072368][T10656] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.072736][T10656] EXT4-fs: Mount option(s) incompatible with ext3 [ 168.093220][ T10] usb 19-1: new full-speed USB device number 2 using vhci_hcd [ 168.128922][T10652] vhci_hcd: connection closed [ 168.129087][T10654] vhci_hcd: connection closed [ 168.129385][T10648] vhci_hcd: connection closed [ 168.134321][ T3567] vhci_hcd: stop threads [ 168.139897][T10650] vhci_hcd: connection closed [ 168.143189][ T3567] vhci_hcd: release socket [ 168.149330][T10646] vhci_hcd: connection closed [ 168.152216][ T3567] vhci_hcd: disconnect device [ 168.157634][T10644] vhci_hcd: connection reset by peer [ 168.161394][ T3567] vhci_hcd: stop threads [ 168.175770][ T3567] vhci_hcd: release socket [ 168.180185][ T3567] vhci_hcd: disconnect device [ 168.185021][ T3567] vhci_hcd: stop threads [ 168.189300][ T3567] vhci_hcd: release socket [ 168.193764][ T3567] vhci_hcd: disconnect device [ 168.198598][ T3567] vhci_hcd: stop threads [ 168.202891][ T3567] vhci_hcd: release socket [ 168.207353][ T3567] vhci_hcd: disconnect device [ 168.212215][ T3567] vhci_hcd: stop threads [ 168.217064][ T3567] vhci_hcd: release socket [ 168.221503][ T3567] vhci_hcd: disconnect device [ 168.236976][ T3567] vhci_hcd: stop threads [ 168.241282][ T3567] vhci_hcd: release socket [ 168.245872][ T3567] vhci_hcd: disconnect device [ 168.267226][T10658] unsupported nla_type 52263 [ 168.288568][T10660] loop7: detected capacity change from 0 to 8192 [ 168.402064][T10668] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 168.436636][T10672] 9pnet_fd: Insufficient options for proto=fd [ 168.499913][T10676] loop7: detected capacity change from 0 to 512 [ 168.507201][T10676] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.526460][T10676] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.539296][T10676] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.554320][T10676] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.554452][T10682] xt_hashlimit: max too large, truncated to 1048576 [ 168.606464][T10676] can0: slcan on ttyS3. [ 168.644718][T10692] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 168.663354][T10675] can0 (unregistered): slcan off ttyS3. [ 168.696959][T10694] loop9: detected capacity change from 0 to 512 [ 168.704599][T10694] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 168.735597][T10694] EXT4-fs (loop9): 1 truncate cleaned up [ 168.741914][T10694] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.806986][ T6509] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.818353][T10703] loop7: detected capacity change from 0 to 512 [ 168.839842][T10712] netlink: 'syz.9.2592': attribute type 4 has an invalid length. [ 168.852422][T10712] netlink: 'syz.9.2592': attribute type 4 has an invalid length. [ 168.909809][T10703] EXT4-fs (loop7): 1 orphan inode deleted [ 168.931601][T10703] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.965598][ T3588] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:54: Failed to release dquot type 1 [ 168.968562][T10724] lo speed is unknown, defaulting to 1000 [ 168.997334][T10703] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.105599][T10735] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 169.225058][T10703] lo speed is unknown, defaulting to 1000 [ 169.306605][T10743] hsr_slave_1 (unregistering): left promiscuous mode [ 169.693959][T10760] FAULT_INJECTION: forcing a failure. [ 169.693959][T10760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.707894][T10760] CPU: 0 UID: 0 PID: 10760 Comm: syz.1.2608 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 169.707970][T10760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 169.707987][T10760] Call Trace: [ 169.707994][T10760] [ 169.708001][T10760] __dump_stack+0x1d/0x30 [ 169.708074][T10760] dump_stack_lvl+0xe8/0x140 [ 169.708102][T10760] dump_stack+0x15/0x1b [ 169.708125][T10760] should_fail_ex+0x265/0x280 [ 169.708190][T10760] should_fail+0xb/0x20 [ 169.708228][T10760] should_fail_usercopy+0x1a/0x20 [ 169.708255][T10760] _copy_from_user+0x1c/0xb0 [ 169.708296][T10760] ___sys_sendmsg+0xc1/0x1d0 [ 169.708371][T10760] __x64_sys_sendmsg+0xd4/0x160 [ 169.708454][T10760] x64_sys_call+0x2999/0x2fb0 [ 169.708483][T10760] do_syscall_64+0xd0/0x1a0 [ 169.708537][T10760] ? clear_bhb_loop+0x40/0x90 [ 169.708567][T10760] ? clear_bhb_loop+0x40/0x90 [ 169.708596][T10760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.708625][T10760] RIP: 0033:0x7fbdb7b8e969 [ 169.708642][T10760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.708707][T10760] RSP: 002b:00007fbdb61f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.708783][T10760] RAX: ffffffffffffffda RBX: 00007fbdb7db5fa0 RCX: 00007fbdb7b8e969 [ 169.708801][T10760] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 169.708818][T10760] RBP: 00007fbdb61f7090 R08: 0000000000000000 R09: 0000000000000000 [ 169.708834][T10760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.708851][T10760] R13: 0000000000000000 R14: 00007fbdb7db5fa0 R15: 00007ffd00152da8 [ 169.708874][T10760] [ 169.933022][T10751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.974115][T10751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.022869][T10774] loop9: detected capacity change from 0 to 512 [ 170.029740][T10774] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.041088][T10771] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 170.055740][T10774] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.068443][T10774] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.080223][T10774] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.121890][T10779] loop1: detected capacity change from 0 to 512 [ 170.225929][T10782] xt_hashlimit: max too large, truncated to 1048576 [ 170.402591][ T6318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.542589][T10800] loop9: detected capacity change from 0 to 1024 [ 170.552680][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 170.552699][ T29] audit: type=1400 audit(2000000799.933:11106): avc: denied { create } for pid=10804 comm="syz.4.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 170.580079][T10800] EXT4-fs: inline encryption not supported [ 170.588309][T10800] journal_path: Non-blockdev passed as './file1' [ 170.594833][T10800] EXT4-fs: error: could not find journal device path [ 170.604176][ T29] audit: type=1400 audit(2000000799.965:11107): avc: denied { mounton } for pid=10799 comm="syz.9.2621" path="/320/file1" dev="tmpfs" ino=1731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 170.627971][ T29] audit: type=1400 audit(2000000799.975:11108): avc: denied { setopt } for pid=10804 comm="syz.4.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 170.648490][ T29] audit: type=1326 audit(2000000799.975:11109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10804 comm="syz.4.2623" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3118ae969 code=0x0 [ 170.696624][T10806] capability: warning: `syz.7.2624' uses deprecated v2 capabilities in a way that may be insecure [ 170.708850][ T29] audit: type=1400 audit(2000000800.080:11110): avc: denied { write } for pid=10807 comm="syz.9.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 170.729327][T10809] netlink: 'syz.4.2623': attribute type 1 has an invalid length. [ 170.737302][T10809] __nla_validate_parse: 5 callbacks suppressed [ 170.737318][T10809] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2623'. [ 170.768130][ T29] audit: type=1400 audit(2000000800.164:11111): avc: denied { create } for pid=10804 comm="syz.4.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.788718][ T29] audit: type=1400 audit(2000000800.164:11112): avc: denied { mount } for pid=10811 comm="syz.7.2626" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 170.814343][T10809] loop9: detected capacity change from 0 to 7 [ 170.820397][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2626'. [ 170.820753][T10809] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.837706][ T29] audit: type=1400 audit(2000000800.206:11113): avc: denied { append } for pid=10804 comm="syz.4.2623" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.862302][ T29] audit: type=1400 audit(2000000800.206:11114): avc: denied { remount } for pid=10811 comm="syz.7.2626" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 170.882493][T10809] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.891100][T10809] loop9: unable to read partition table [ 170.899683][T10809] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 170.899683][T10809] U) failed (rc=-5) [ 170.927032][ T29] audit: type=1400 audit(2000000800.321:11115): avc: denied { name_bind } for pid=10814 comm="syz.9.2627" src=20066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 170.963374][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2627'. [ 170.986079][T10815] dummy0: entered promiscuous mode [ 170.991408][T10815] macsec0: entered allmulticast mode [ 170.997459][T10815] dummy0: entered allmulticast mode [ 171.029827][T10824] IPv6: Can't replace route, no match found [ 171.103914][T10836] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 171.169838][T10844] loop7: detected capacity change from 0 to 512 [ 171.186673][T10844] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.218196][T10844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.233733][T10844] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.245036][T10859] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 171.253712][T10859] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 171.266202][T10844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.304975][T10844] can0: slcan on ttyS3. [ 171.338848][T10843] can0 (unregistered): slcan off ttyS3. [ 171.339085][T10870] xt_hashlimit: max too large, truncated to 1048576 [ 171.413180][T10877] loop9: detected capacity change from 0 to 512 [ 171.420348][T10877] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 171.452741][T10877] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002] [ 171.472619][T10877] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #11: comm syz.9.2647: missing EA_INODE flag [ 171.492814][T10886] loop1: detected capacity change from 0 to 128 [ 171.507712][T10877] EXT4-fs (loop9): Remounting filesystem read-only [ 171.519631][T10877] EXT4-fs (loop9): 1 orphan inode deleted [ 171.528351][T10877] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.541292][T10886] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.544215][T10877] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.565649][T10886] ext4 filesystem being mounted at /503/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.637452][T10886] ref_ctr increment failed for inode: 0xd offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005e300 [ 171.677640][T10885] uprobe: syz.1.2654:10885 failed to unregister, leaking uprobe [ 171.728521][T10902] openvswitch: netlink: Message has 6 unknown bytes. [ 171.824958][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.848526][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2660'. [ 171.950921][T10914] loop7: detected capacity change from 0 to 2048 [ 171.988145][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2667'. [ 172.007351][T10914] loop7: p1 < > p4 [ 172.013592][T10914] loop7: p4 size 8388608 extends beyond EOD, truncated [ 172.062308][T10926] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 172.098891][T10932] usb usb8: usbfs: process 10932 (syz.7.2673) did not claim interface 0 before use [ 172.184374][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2677'. [ 172.195107][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2676'. [ 172.275282][T10954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2681'. [ 172.285396][T10945] loop9: detected capacity change from 0 to 512 [ 172.302628][T10945] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 172.317284][T10934] loop1: detected capacity change from 0 to 512 [ 172.325481][T10945] EXT4-fs (loop9): 1 truncate cleaned up [ 172.331954][T10945] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.350017][T10934] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #4: comm syz.1.2674: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 172.370593][T10934] EXT4-fs (loop1): Remounting filesystem read-only [ 172.371108][ T6509] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.378117][T10934] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 172.401434][T10934] EXT4-fs (loop1): mount failed [ 172.457194][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2686'. [ 172.545776][T10973] loop9: detected capacity change from 0 to 512 [ 172.557747][T10972] xt_hashlimit: max too large, truncated to 1048576 [ 172.584417][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2689'. [ 172.680649][T10984] loop9: detected capacity change from 0 to 1024 [ 172.687851][T10984] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 172.700852][T10984] EXT4-fs error (device loop9): ext4_map_blocks:709: inode #3: block 1: comm syz.9.2692: lblock 1 mapped to illegal pblock 1 (length 1) [ 172.715455][T10984] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.2692: Failed to acquire dquot type 0 [ 172.727736][T10984] EXT4-fs error (device loop9): ext4_free_blocks:6587: comm syz.9.2692: Freeing blocks not in datazone - block = 0, count = 4096 [ 172.741479][T10984] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.2692: Invalid inode bitmap blk 0 in block_group 0 [ 172.755019][T10984] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 172.763899][ T3584] EXT4-fs error (device loop9): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:50: lblock 1 mapped to illegal pblock 1 (length 1) [ 172.764113][T10984] EXT4-fs (loop9): 1 orphan inode deleted [ 172.779760][ T3584] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:50: Failed to release dquot type 0 [ 172.785250][T10984] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.885520][T10987] FAULT_INJECTION: forcing a failure. [ 172.885520][T10987] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.899524][T10987] CPU: 0 UID: 0 PID: 10987 Comm: syz.2.2693 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 172.899596][T10987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 172.899609][T10987] Call Trace: [ 172.899616][T10987] [ 172.899626][T10987] __dump_stack+0x1d/0x30 [ 172.899653][T10987] dump_stack_lvl+0xe8/0x140 [ 172.899678][T10987] dump_stack+0x15/0x1b [ 172.899721][T10987] should_fail_ex+0x265/0x280 [ 172.899790][T10987] should_fail_alloc_page+0xf2/0x100 [ 172.899900][T10987] __alloc_frozen_pages_noprof+0xff/0x360 [ 172.899934][T10987] alloc_pages_mpol+0xb3/0x250 [ 172.899977][T10987] vma_alloc_folio_noprof+0x1aa/0x300 [ 172.900011][T10987] handle_mm_fault+0x1056/0x2ae0 [ 172.900102][T10987] ? mas_walk+0xf2/0x120 [ 172.900186][T10987] do_user_addr_fault+0x636/0x1090 [ 172.900232][T10987] exc_page_fault+0x54/0xc0 [ 172.900254][T10987] asm_exc_page_fault+0x26/0x30 [ 172.900303][T10987] RIP: 0033:0x7fc1f9fbbf6b [ 172.900323][T10987] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 172.900347][T10987] RSP: 002b:00007fc1f8674e10 EFLAGS: 00010246 [ 172.900367][T10987] RAX: 00007fc1f8676f30 RBX: 00007fc1fa203620 RCX: 0000000000000000 [ 172.900410][T10987] RDX: 00007fc1f8676f78 RSI: 00007fc1fa06dbf8 RDI: 00007fc1f8674e30 [ 172.900426][T10987] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 172.900442][T10987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.900454][T10987] R13: 0000000000000000 R14: 00007fc1fa235fa0 R15: 00007ffc9af81278 [ 172.900474][T10987] [ 172.900485][T10987] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 173.076911][ T10] usb 19-1: enqueue for inactive port 0 [ 173.077695][ T6509] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.082517][ T10] usb 19-1: enqueue for inactive port 0 [ 173.147446][ T10] vhci_hcd: vhci_device speed not set [ 173.153229][T10999] loop7: detected capacity change from 0 to 512 [ 173.160344][T10999] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.192062][T11005] IPv6: Can't replace route, no match found [ 173.221332][T10999] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.242915][T10999] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.283487][T10999] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.443591][T11040] netlink: 'syz.1.2711': attribute type 1 has an invalid length. [ 173.470819][T11040] loop9: detected capacity change from 0 to 7 [ 173.481168][T11040] Buffer I/O error on dev loop9, logical block 0, async page read [ 173.489123][T11040] Buffer I/O error on dev loop9, logical block 0, async page read [ 173.497052][T11040] loop9: unable to read partition table [ 173.505202][T11040] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 173.505202][T11040] U) failed (rc=-5) [ 173.561054][T11049] netlink: 'syz.4.2715': attribute type 13 has an invalid length. [ 173.647216][T11060] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 173.849218][T11078] hugetlbfs: Bad value '%' for mount option 'size' [ 173.849218][T11078] [ 173.890125][T11085] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 174.024925][T11105] IPv6: Can't replace route, no match found [ 174.051288][T11110] FAULT_INJECTION: forcing a failure. [ 174.051288][T11110] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 174.064696][T11110] CPU: 0 UID: 0 PID: 11110 Comm: syz.7.2744 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 174.064776][T11110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 174.064793][T11110] Call Trace: [ 174.064801][T11110] [ 174.064811][T11110] __dump_stack+0x1d/0x30 [ 174.064840][T11110] dump_stack_lvl+0xe8/0x140 [ 174.064982][T11110] dump_stack+0x15/0x1b [ 174.065006][T11110] should_fail_ex+0x265/0x280 [ 174.065052][T11110] should_fail_alloc_page+0xf2/0x100 [ 174.065097][T11110] __alloc_frozen_pages_noprof+0xff/0x360 [ 174.065230][T11110] alloc_pages_mpol+0xb3/0x250 [ 174.065330][T11110] vma_alloc_folio_noprof+0x1aa/0x300 [ 174.065367][T11110] handle_mm_fault+0x1056/0x2ae0 [ 174.065422][T11110] ? mas_walk+0xf2/0x120 [ 174.065461][T11110] do_user_addr_fault+0x636/0x1090 [ 174.065568][T11110] exc_page_fault+0x54/0xc0 [ 174.065595][T11110] asm_exc_page_fault+0x26/0x30 [ 174.065620][T11110] RIP: 0033:0x7fd7234bbf6b [ 174.065661][T11110] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 174.065680][T11110] RSP: 002b:00007fd721b74e10 EFLAGS: 00010246 [ 174.065699][T11110] RAX: 00007fd721b76f30 RBX: 00007fd723703620 RCX: 0000000000000000 [ 174.065715][T11110] RDX: 00007fd721b76f78 RSI: 00007fd72356dbf8 RDI: 00007fd721b74e30 [ 174.065756][T11110] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 174.065773][T11110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.065789][T11110] R13: 0000000000000000 R14: 00007fd723735fa0 R15: 00007ffe6e452b68 [ 174.065854][T11110] [ 174.065866][T11110] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 174.274532][T11122] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 174.410944][T11132] IPv6: Can't replace route, no match found [ 174.531887][T11144] loop9: detected capacity change from 0 to 2048 [ 174.558359][T11144] loop9: p1 < > p4 [ 174.567517][T11144] loop9: p4 size 8388608 extends beyond EOD, truncated [ 174.652490][T11153] loop7: detected capacity change from 0 to 512 [ 174.659636][T11153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.684929][T11157] loop9: detected capacity change from 0 to 512 [ 174.685781][T11153] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.703922][T11153] ext4 filesystem being mounted at /403/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.711274][T11157] EXT4-fs (loop9): 1 orphan inode deleted [ 174.720673][T11157] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.720826][ T3557] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:24: Failed to release dquot type 1 [ 174.734623][T11157] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.746947][T11153] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.817020][T11153] can0: slcan on ttyS3. [ 174.824321][ T6509] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.871880][T11152] can0 (unregistered): slcan off ttyS3. [ 174.977642][T11172] loop7: detected capacity change from 0 to 512 [ 174.990616][T11175] SELinux: syz.9.2770 (11175) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 175.007746][T11172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.008532][T11172] ext4 filesystem being mounted at /406/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.073510][ T6318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.198490][T11196] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 175.299921][T11203] IPv6: Can't replace route, no match found [ 175.392202][T11209] loop7: detected capacity change from 0 to 512 [ 175.400319][T11209] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 175.419230][T11209] EXT4-fs (loop7): 1 truncate cleaned up [ 175.436060][T11209] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.493933][T11227] netlink: 'syz.9.2788': attribute type 2 has an invalid length. [ 175.501847][T11227] __nla_validate_parse: 9 callbacks suppressed [ 175.501864][T11227] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2788'. [ 175.518672][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 175.518691][ T29] audit: type=1400 audit(2000000805.120:11491): avc: denied { mount } for pid=11230 comm="syz.4.2789" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 175.522220][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 175.524885][ T29] audit: type=1400 audit(2000000805.120:11492): avc: denied { mounton } for pid=11230 comm="syz.4.2789" path="/559/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 175.548631][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 175.554719][ T29] audit: type=1400 audit(2000000805.120:11493): avc: denied { mount } for pid=11230 comm="syz.4.2789" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.554816][ T29] audit: type=1400 audit(2000000805.120:11494): avc: denied { create } for pid=11230 comm="syz.4.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 175.554866][ T29] audit: type=1400 audit(2000000805.130:11495): avc: denied { sys_admin } for pid=11230 comm="syz.4.2789" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 175.651030][ T29] audit: type=1400 audit(2000000805.141:11496): avc: denied { unmount } for pid=11230 comm="syz.4.2789" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.671037][ T29] audit: type=1400 audit(2000000805.141:11497): avc: denied { ioctl } for pid=11232 comm="syz.2.2791" path="socket:[33370]" dev="sockfs" ino=33370 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.696767][ T29] audit: type=1400 audit(2000000805.141:11498): avc: denied { bind } for pid=11232 comm="syz.2.2791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.697865][ T6318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.716896][ T29] audit: type=1400 audit(2000000805.151:11499): avc: denied { read write } for pid=11232 comm="syz.2.2791" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 175.749478][ T29] audit: type=1400 audit(2000000805.151:11500): avc: denied { open } for pid=11232 comm="syz.2.2791" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 175.772040][T11245] loop1: detected capacity change from 0 to 256 [ 175.786286][T11245] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 175.795116][T11245] FAT-fs (loop1): Filesystem has been set read-only [ 175.804283][T11245] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 175.813361][T11245] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 175.891147][T11258] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 175.978794][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2805'. [ 176.007551][T11267] loop9: detected capacity change from 0 to 512 [ 176.016308][T11267] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 176.027850][T11267] EXT4-fs (loop9): 1 truncate cleaned up [ 176.035245][T11267] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.064864][ T6509] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.079953][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2807'. [ 176.135072][T11286] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 176.245756][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2817'. [ 176.305495][T11301] SELinux: syz.9.2818 (11301) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 176.456928][T11320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2826'. [ 176.508395][T11323] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 176.524168][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2829'. [ 176.677767][T11343] loop7: detected capacity change from 0 to 512 [ 176.722014][T11343] EXT4-fs (loop7): 1 orphan inode deleted [ 176.742832][T11343] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.755689][ T3571] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:38: Failed to release dquot type 1 [ 176.805961][T11343] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.992530][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2843'. [ 177.108501][ T6318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.152098][T11374] IPv6: Can't replace route, no match found [ 177.294231][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2854'. [ 177.306677][T11388] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 177.444347][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2857'. [ 177.508355][T11406] loop9: detected capacity change from 0 to 1024 [ 177.555640][T11406] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.607342][T11414] xt_hashlimit: max too large, truncated to 1048576 [ 177.617111][T11406] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.2863: Allocating blocks 497-513 which overlap fs metadata [ 177.646244][T11406] EXT4-fs (loop9): pa ffff888106dbf850: logic 16, phys. 145, len 23 [ 177.654339][T11406] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 177.697520][T11419] loop7: detected capacity change from 0 to 512 [ 177.729526][T11419] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 177.750335][T11419] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002] [ 177.776643][T11419] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.2866: missing EA_INODE flag [ 177.818169][T11419] EXT4-fs (loop7): Remounting filesystem read-only [ 177.840248][T11419] EXT4-fs (loop7): 1 orphan inode deleted [ 177.846505][T11419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.848546][ T6509] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.868792][T11419] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.077429][T11289] loop1: detected capacity change from 0 to 2048 [ 178.183474][T11444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2884'. [ 178.197630][T11289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.304858][T11461] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 178.320554][T11461] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 178.332907][T11461] EXT4-fs (loop1): This should not happen!! Data will be lost [ 178.332907][T11461] [ 178.342649][T11461] EXT4-fs (loop1): Total free blocks count 0 [ 178.348683][T11461] EXT4-fs (loop1): Free/Dirty block details [ 178.349390][T11463] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 178.354657][T11461] EXT4-fs (loop1): free_blocks=2415919104 [ 178.354677][T11461] EXT4-fs (loop1): dirty_blocks=48 [ 178.372687][T11461] EXT4-fs (loop1): Block reservation details [ 178.378738][T11461] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 178.434393][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.525174][T11480] pimreg: entered allmulticast mode [ 178.531956][T11480] pimreg: left allmulticast mode [ 178.536820][T11476] loop1: detected capacity change from 0 to 512 [ 178.557087][T11476] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.572499][T11474] SELinux: syz.7.2888 (11474) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 178.618265][T11476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.642195][T11476] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.654826][T11476] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.664368][T11488] loop9: detected capacity change from 0 to 512 [ 178.698277][T11492] IPv6: Can't replace route, no match found [ 178.711034][T11488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.734026][T11488] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.754261][T11488] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.763924][T11500] pimreg: entered allmulticast mode [ 178.766118][T11488] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.773203][T11500] pimreg: left allmulticast mode [ 178.831788][T11505] loop7: detected capacity change from 0 to 1764 [ 178.839690][T11505] isofs_fill_super: root inode is not a directory. Corrupted media? [ 178.855999][T11476] can0: slcan on ttyS3. [ 178.875115][T11505] loop7: detected capacity change from 0 to 512 [ 178.885687][T11505] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 178.900416][T11505] EXT4-fs (loop7): orphan cleanup on readonly fs [ 178.917435][T11505] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.2900: Failed to acquire dquot type 1 [ 178.939327][T11505] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2900: bg 0: block 40: padding at end of block bitmap is not set [ 178.954567][T11505] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 178.965425][T11505] EXT4-fs (loop7): 1 truncate cleaned up [ 178.971696][T11505] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.998918][T11523] SELinux: syz.2.2905 (11523) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 179.036341][T11487] can0 (unregistered): slcan off ttyS3. [ 179.045070][ T6318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.224170][T11550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 179.251061][T11548] loop7: detected capacity change from 0 to 128 [ 179.264058][T11548] EXT4-fs: test_dummy_encryption option not supported [ 179.304669][T11556] tap0: tun_chr_ioctl cmd 1074025677 [ 179.310990][T11556] tap0: linktype set to 773 [ 179.317840][T11556] smc: net device bond0 applied user defined pnetid SYZ2 [ 179.326541][T11556] smc: net device bond0 erased user defined pnetid SYZ2 [ 179.473603][T11568] IPv6: Can't replace route, no match found [ 179.524097][T11573] SELinux: syz.2.2922 (11573) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 179.656895][T11582] SELinux: syz.1.2927 (11582) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 179.722175][ T3567] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.748769][T11593] loop1: detected capacity change from 0 to 512 [ 179.770963][ T3567] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.782370][T11593] ext4 filesystem being mounted at /534/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.803836][T11583] lo speed is unknown, defaulting to 1000 [ 179.814165][T11599] pimreg: entered allmulticast mode [ 179.830601][T11599] pimreg: left allmulticast mode [ 179.840683][ T3567] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.908378][ T3567] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.932905][T11583] chnl_net:caif_netlink_parms(): no params data found [ 179.970890][T11583] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.978133][T11583] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.989512][T11583] bridge_slave_0: entered allmulticast mode [ 179.996410][T11583] bridge_slave_0: entered promiscuous mode [ 180.016229][T11583] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.023365][T11583] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.032131][T11583] bridge_slave_1: entered allmulticast mode [ 180.038887][T11583] bridge_slave_1: entered promiscuous mode [ 180.123555][ T3567] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.132479][ T3567] bond_slave_0: left promiscuous mode [ 180.138085][ T3567] bond_slave_0: left allmulticast mode [ 180.144681][ T3567] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.153700][ T3567] bond_slave_1: left promiscuous mode [ 180.159246][ T3567] bond_slave_1: left allmulticast mode [ 180.165746][ T3567] $H (unregistering): Released all slaves [ 180.174439][T11624] loop7: detected capacity change from 0 to 512 [ 180.174949][ T3567] bond0 (unregistering): Released all slaves [ 180.181397][T11624] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.201653][T11616] IPv6: Can't replace route, no match found [ 180.209681][T11624] ext4 filesystem being mounted at /438/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.226077][T11583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.242367][ T3567] hsr_slave_0: left promiscuous mode [ 180.249016][ T3567] hsr_slave_1: left promiscuous mode [ 180.259498][ T3567] veth1_vlan: left promiscuous mode [ 180.264850][ T3567] veth0_vlan: left promiscuous mode [ 180.280759][T11631] xt_TPROXY: Can be used only with -p tcp or -p udp [ 180.343753][T11583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.355505][T11624] can0: slcan on ttyS3. [ 180.362103][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 180.362121][ T29] audit: type=1400 audit(2000000810.233:11929): avc: denied { write } for pid=11629 comm="syz.2.2938" name="raw6" dev="proc" ino=4026532938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 180.400906][T11583] team0: Port device team_slave_0 added [ 180.409413][T11583] team0: Port device team_slave_1 added [ 180.417545][T11633] __nla_validate_parse: 8 callbacks suppressed [ 180.417560][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2939'. [ 180.433553][T11623] can0 (unregistered): slcan off ttyS3. [ 180.450254][T11583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.457367][T11583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.483353][T11583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.494669][T11583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.501720][T11583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.527793][T11583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.555785][ T29] audit: type=1400 audit(2000000810.432:11930): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 180.592562][T11638] tap0: tun_chr_ioctl cmd 1074025677 [ 180.599379][ T29] audit: type=1400 audit(2000000810.485:11931): avc: denied { read write } for pid=11637 comm="syz.1.2942" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 180.622849][ T29] audit: type=1400 audit(2000000810.485:11932): avc: denied { open } for pid=11637 comm="syz.1.2942" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 180.627743][T11641] loop7: detected capacity change from 0 to 512 [ 180.646267][ T29] audit: type=1400 audit(2000000810.485:11933): avc: denied { ioctl } for pid=11637 comm="syz.1.2942" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 180.654171][T11638] tap0: linktype set to 773 [ 180.688406][T11639] loop1: detected capacity change from 0 to 512 [ 180.695377][T11639] EXT4-fs: Ignoring removed i_version option [ 180.698917][T11583] hsr_slave_0: entered promiscuous mode [ 180.701573][T11639] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.708952][T11583] hsr_slave_1: entered promiscuous mode [ 180.720715][T11583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.721662][T11639] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.728269][T11583] Cannot create hsr debugfs directory [ 180.728458][T11643] smc: net device bond0 applied user defined pnetid SYZ2 [ 180.741341][T11639] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 180.745056][T11641] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.778012][T11639] loop1: detected capacity change from 0 to 128 [ 180.789077][T11638] smc: net device bond0 erased user defined pnetid SYZ2 [ 180.798453][ T29] audit: type=1400 audit(2000000810.674:11934): avc: denied { mount } for pid=11637 comm="syz.1.2942" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 180.803369][T11639] syz.1.2942: attempt to access beyond end of device [ 180.803369][T11639] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 180.878618][T11641] 8021q: VLANs not supported on sit0 [ 180.898561][T11641] ALSA: seq fatal error: cannot create timer (-19) [ 180.911335][ T29] audit: type=1400 audit(2000000810.800:11935): avc: denied { write } for pid=11640 comm="syz.7.2943" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.933376][ T29] audit: type=1400 audit(2000000810.800:11936): avc: denied { add_name } for pid=11640 comm="syz.7.2943" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.954659][ T29] audit: type=1400 audit(2000000810.800:11937): avc: denied { create } for pid=11640 comm="syz.7.2943" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 180.975422][ T29] audit: type=1400 audit(2000000810.800:11938): avc: denied { write open } for pid=11640 comm="syz.7.2943" path="/440/file1/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 181.023260][T11653] netlink: 10 bytes leftover after parsing attributes in process `syz.9.2945'. [ 181.032478][T11653] openvswitch: netlink: Flow key attr not present in new flow. [ 181.042620][T11654] IPv6: Can't replace route, no match found [ 181.046876][ T3557] kworker/u8:24: attempt to access beyond end of device [ 181.046876][ T3557] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 181.229754][T11667] can0: slcan on ttyS3. [ 181.281601][T11664] can0 (unregistered): slcan off ttyS3. [ 181.288602][T11583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.307716][T11583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.321613][T11583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.331993][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2955'. [ 181.341993][T11675] loop1: detected capacity change from 0 to 2048 [ 181.344211][T11583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.357467][T11675] EXT4-fs (loop1): unsupported inode size: 46 [ 181.363716][T11675] EXT4-fs (loop1): blocksize: 4096 [ 181.422428][T11685] loop9: detected capacity change from 0 to 512 [ 181.439549][T11583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.459435][T11583] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.504712][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.511901][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.535360][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.542554][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.581103][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2963'. [ 181.679841][T11706] netlink: 'syz.2.2965': attribute type 13 has an invalid length. [ 181.701499][T11583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.728243][T11706] gretap0: refused to change device tx_queue_len [ 181.742021][T11706] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 181.973615][T11583] veth0_vlan: entered promiscuous mode [ 181.982433][T11583] veth1_vlan: entered promiscuous mode [ 182.001889][T11721] can0: slcan on ttyS3. [ 182.003381][T11583] veth0_macvtap: entered promiscuous mode [ 182.017997][T11583] veth1_macvtap: entered promiscuous mode [ 182.030881][T11583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.044452][T11583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.054636][T11720] can0 (unregistered): slcan off ttyS3. [ 182.064519][T11583] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.073403][T11583] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.082210][T11583] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.091150][T11583] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.156737][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'. [ 182.196736][T11732] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2969'. [ 182.205799][T11732] openvswitch: netlink: Flow key attr not present in new flow. [ 182.234587][T11733] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 182.365050][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2976'. [ 182.479072][T11759] loop4: detected capacity change from 0 to 2048 [ 182.486222][T11759] EXT4-fs (loop4): unsupported inode size: 46 [ 182.492426][T11759] EXT4-fs (loop4): blocksize: 4096 [ 182.509833][T11763] loop7: detected capacity change from 0 to 512 [ 182.737251][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2988'. [ 182.953254][T11786] IPv6: Can't replace route, no match found [ 183.114555][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2995'. [ 183.139648][T11799] loop7: detected capacity change from 0 to 512 [ 183.146327][T11799] EXT4-fs: Ignoring removed i_version option [ 183.152473][T11799] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.159825][T11799] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 183.172139][T11799] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 183.183697][T11799] loop7: detected capacity change from 0 to 128 [ 183.204457][T11799] syz.7.2996: attempt to access beyond end of device [ 183.204457][T11799] loop7: rw=0, sector=121, nr_sectors = 120 limit=128 [ 183.233111][ T3584] kworker/u8:50: attempt to access beyond end of device [ 183.233111][ T3584] loop7: rw=1, sector=241, nr_sectors = 800 limit=128 [ 183.361347][T11814] tap0: tun_chr_ioctl cmd 1074025677 [ 183.367600][T11814] tap0: linktype set to 773 [ 183.384990][T11814] smc: net device bond0 applied user defined pnetid SYZ2 [ 183.406204][T11814] smc: net device bond0 erased user defined pnetid SYZ2 [ 183.458094][T11825] loop9: detected capacity change from 0 to 512 [ 183.472125][T11827] pimreg: entered allmulticast mode [ 183.475097][T11825] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.478302][T11827] pimreg: left allmulticast mode [ 183.592036][T11836] tap0: tun_chr_ioctl cmd 1074025677 [ 183.598069][T11836] tap0: linktype set to 773 [ 183.606698][T11836] smc: net device bond0 applied user defined pnetid SYZ2 [ 183.614151][T11836] smc: net device bond0 erased user defined pnetid SYZ2 [ 183.705944][T11850] tap0: tun_chr_ioctl cmd 1074025677 [ 183.706547][T11848] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 183.713401][T11850] tap0: linktype set to 773 [ 183.725139][T11850] smc: net device bond0 applied user defined pnetid SYZ2 [ 183.732966][T11850] smc: net device bond0 erased user defined pnetid SYZ2 [ 183.822063][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3019'. [ 183.888030][T11860] loop4: detected capacity change from 0 to 512 [ 184.429117][T11874] loop9: detected capacity change from 0 to 512 [ 184.457224][T11876] tap0: tun_chr_ioctl cmd 1074025677 [ 184.460391][T11874] EXT4-fs: Ignoring removed i_version option [ 184.468801][T11874] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.482704][T11876] tap0: linktype set to 773 [ 184.500770][T11876] smc: net device bond0 applied user defined pnetid SYZ2 [ 184.503122][T11874] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 184.538140][T11874] EXT4-fs (loop9): can't mount with data_err=abort, fs mounted w/o journal [ 184.539093][T11876] smc: net device bond0 erased user defined pnetid SYZ2 [ 184.575026][T11874] loop9: detected capacity change from 0 to 128 [ 184.647671][T11874] syz.9.3028: attempt to access beyond end of device [ 184.647671][T11874] loop9: rw=0, sector=121, nr_sectors = 120 limit=128 [ 184.702754][ T3584] kworker/u8:50: attempt to access beyond end of device [ 184.702754][ T3584] loop9: rw=1, sector=241, nr_sectors = 800 limit=128 [ 184.755935][T11888] random: crng reseeded on system resumption [ 184.859826][T11903] support for cryptoloop has been removed. Use dm-crypt instead. [ 184.887605][T11898] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 184.932930][T11909] loop7: detected capacity change from 0 to 512 [ 184.939979][T11909] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 184.960828][T11909] EXT4-fs (loop7): 1 truncate cleaned up [ 300.700260][T11917] nfs: Unexpected value for 'acl' [ 300.710437][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 300.710454][ T29] audit: type=1400 audit(2000000936.591:12175): avc: denied { create } for pid=11920 comm="syz.7.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 300.743316][ T29] audit: type=1400 audit(2000000936.622:12176): avc: denied { getopt } for pid=11920 comm="syz.7.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 300.763006][ T29] audit: type=1400 audit(2000000936.622:12177): avc: denied { create } for pid=11915 comm="syz.4.3049" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 300.784005][ T29] audit: type=1400 audit(2000000936.622:12178): avc: denied { ioctl } for pid=11920 comm="syz.7.3045" path="socket:[35835]" dev="sockfs" ino=35835 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 300.827697][T11919] can0: slcan on ttyS3. [ 300.854288][T11928] loop7: detected capacity change from 0 to 512 [ 300.856407][ T29] audit: type=1400 audit(2000000936.696:12179): avc: denied { getopt } for pid=11913 comm="syz.1.3046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 300.864148][T11928] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 300.880207][ T29] audit: type=1400 audit(2000000936.717:12180): avc: denied { mounton } for pid=11915 comm="syz.4.3049" path="/16/file0" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 300.900224][T11932] loop9: detected capacity change from 0 to 512 [ 300.930090][T11932] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 300.939348][T11928] EXT4-fs mount: 10 callbacks suppressed [ 300.939368][T11928] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.961774][ T29] audit: type=1400 audit(2000000936.853:12181): avc: denied { unlink } for pid=11583 comm="syz-executor" name="file0" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 300.967387][T11917] __nla_validate_parse: 2 callbacks suppressed [ 300.967416][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3046'. [ 300.985340][T11928] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.991415][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3046'. [ 301.002742][T11928] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.040158][T11940] random: crng reseeded on system resumption [ 301.047504][T11932] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.063192][T11932] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.081386][T11932] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.099944][ T29] audit: type=1400 audit(2000000936.990:12182): avc: denied { ioctl } for pid=11913 comm="syz.1.3046" path="socket:[35839]" dev="sockfs" ino=35839 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 301.125890][ T29] audit: type=1326 audit(2000000936.990:12183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11913 comm="syz.1.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb7b8e969 code=0x7ffc0000 [ 301.149644][ T29] audit: type=1326 audit(2000000936.990:12184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11913 comm="syz.1.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb7b8e969 code=0x7ffc0000 [ 301.257961][T11947] netlink: 'syz.2.3055': attribute type 1 has an invalid length. [ 301.266228][T11947] netlink: 'syz.2.3055': attribute type 2 has an invalid length. [ 301.288165][T11947] netlink: 'syz.2.3055': attribute type 1 has an invalid length. [ 301.296058][T11947] netlink: 'syz.2.3055': attribute type 2 has an invalid length. [ 301.395124][T11926] can0 (unregistered): slcan off ttyS3. [ 301.402884][T11957] loop9: detected capacity change from 0 to 512 [ 301.425070][T11957] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 301.456629][T11957] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.489893][T11957] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.528174][T11957] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.562204][T11970] loop7: detected capacity change from 0 to 1024 [ 301.579377][T11970] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 301.622922][T11970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.631761][T11970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.650446][T11953] can0: slcan on ttyS3. [ 301.709332][T11952] can0 (unregistered): slcan off ttyS3. [ 301.788355][T11981] lo speed is unknown, defaulting to 1000 [ 302.090228][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3067'. [ 302.490687][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3080'. [ 303.231372][T12042] ================================================================== [ 303.239604][T12042] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 303.247269][T12042] [ 303.249620][T12042] write to 0xffff888108c04760 of 8 bytes by task 12039 on cpu 1: [ 303.257359][T12042] mas_wr_store_entry+0x15cc/0x2b60 [ 303.262592][T12042] mas_store_prealloc+0x74d/0x9e0 [ 303.267662][T12042] commit_merge+0x66e/0x6f0 [ 303.272177][T12042] vma_expand+0x1d0/0x370 [ 303.276516][T12042] vma_merge_new_range+0x296/0x310 [ 303.281674][T12042] mmap_region+0x7e6/0x1470 [ 303.286214][T12042] do_mmap+0x9de/0xc20 [ 303.290724][T12042] vm_mmap_pgoff+0x17a/0x2e0 [ 303.295317][T12042] ksys_mmap_pgoff+0xc2/0x310 [ 303.300004][T12042] x64_sys_call+0x1602/0x2fb0 [ 303.304709][T12042] do_syscall_64+0xd0/0x1a0 [ 303.309234][T12042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.315144][T12042] [ 303.317465][T12042] read to 0xffff888108c04760 of 8 bytes by task 12042 on cpu 0: [ 303.325092][T12042] mas_state_walk+0x2f5/0x650 [ 303.329784][T12042] mas_walk+0x30/0x120 [ 303.333866][T12042] lock_vma_under_rcu+0xa2/0x2f0 [ 303.338824][T12042] do_user_addr_fault+0x233/0x1090 [ 303.343958][T12042] exc_page_fault+0x54/0xc0 [ 303.348462][T12042] asm_exc_page_fault+0x26/0x30 [ 303.353322][T12042] [ 303.355669][T12042] value changed: 0x00007fbdb6194fff -> 0x00007fbdb6173fff [ 303.362787][T12042] [ 303.365114][T12042] Reported by Kernel Concurrency Sanitizer on: [ 303.371290][T12042] CPU: 0 UID: 0 PID: 12042 Comm: syz.1.3086 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 303.382073][T12042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 303.392150][T12042] ==================================================================