last executing test programs: 5.965405002s ago: executing program 1 (id=541): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x20, 0x1a6f}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0x9, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2, 0x3, 0x5, 0x2, 0x1, @empty, @local, 0x20, 0x700, 0x7, 0x790f}}) r8 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x700, 0x80, 0x89f0, 0x400, {{0xf, 0x4, 0x1, 0x9, 0x3c, 0x67, 0x0, 0x4, 0x29, 0x0, @multicast1, @multicast2, {[@end, @timestamp_addr={0x44, 0x24, 0x93, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@remote, 0x9}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x7, 0x40, 0x9c68, 0x5, {{0x21, 0x4, 0x0, 0x3d, 0x84, 0x67, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp_prespec={0x44, 0x14, 0xeb, 0x3, 0xb, [{@private=0xa010100, 0x4}, {@dev={0xac, 0x14, 0x14, 0x16}, 0xdd5}]}, @cipso={0x86, 0x39, 0x1, [{0x5, 0x5, "89dc15"}, {0x1, 0x2}, {0x6, 0x5, "67c542"}, {0x1, 0x5, "f371c1"}, {0x5, 0x2}, {0x7, 0xd, "0faeed33fa9fcb7ca49f0b"}, {0x1, 0x8, "f68f84a6ad87"}, {0x1, 0x2}, {0x6, 0x7, "24bfcc09ef"}, {0x2, 0x2}]}, @generic={0x89, 0xf, "9805bb46649bf9c24a48385ef2"}, @rr={0x7, 0x13, 0x33, [@dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, @loopback, @rand_addr=0x64010101]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000c00)=ANY=[@ANYBLOB="b0040000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000008000100", @ANYRES32=r3, @ANYBLOB="3001028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000008000008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000200082a030000000500088004000000010008b0feffffff0b0006400500000002000508040000000400f20f8100000004000a0600feffff08000100", @ANYRES32=r9, @ANYBLOB="6401028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r11, @ANYBLOB="400001002400010071756575655f696400000000009f3d2b4d5aceb76f280c0aba8244b3fc0000000000000000210000000000000000000005000300", @ANYRES32=r12, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004001a0000006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400060040000a000000dcc2e406ffffffff06000740050000004000402cff0300000600b7050800000002000623ff0f000038007704020000000800", @ANYRES32=r14, @ANYBLOB="2801028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400090000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000500000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400fbc40000080007000000000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000004000008000700000000"], 0x4b0}, 0x1, 0x0, 0x0, 0x4}, 0x4040) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r15, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 4.19705306s ago: executing program 3 (id=560): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x2562b0eb07c99df5, r0, 0x1, &(0x7f0000000500)="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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r1, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRESDEC=r0, @ANYRES8, @ANYRESOCT=r1], 0x64}}, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x1f, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702002782613900b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000", @ANYRES32, @ANYBLOB="0000000000000000180000000400000000000000f9ffffff03b205000700000018130000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) r3 = gettid() r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r4, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(r0, &(0x7f0000000080)) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.039375916s ago: executing program 1 (id=551): r0 = socket(0x10, 0x2, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x18) eventfd2(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x15}, 0x94) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) fcntl$getflags(r5, 0x40a) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1, 0xfffffffd, 0x2}}) 4.010220388s ago: executing program 3 (id=552): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_get$uid(0x3, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x8000000) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', &(0x7f0000000280)={0x101000, 0x188}, 0x18) execveat(r4, &(0x7f00000002c0)='./file2\x00', &(0x7f0000000380)={[&(0x7f0000000300)='(,(\x00']}, &(0x7f00000008c0)={[&(0x7f00000003c0)='%+&\x00']}, 0x100) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e26, 0x49, @empty, 0x4}}, 0x0, 0x8, 0x8002, 0x0, 0x1b2, 0x0, 0x9}, 0x9c) sendmsg$inet(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="5c00000028006b05c84e21020ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e61821466cdc3dc0048dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504b99189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000001000000000000000100000d000000000000000000000000020000000000000c02000000000061"], 0x0, 0x4c, 0x0, 0x1}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r6}, 0x38) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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") r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0x7, 0x0, 0x44, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) 3.926850317s ago: executing program 0 (id=555): r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200000, &(0x7f0000000340)={[], [{@uid_eq}, {@obj_type={'obj_type', 0x3d, 'mcast_rejoin_interval\x00'}}]}, 0x1, 0xbbb, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r6, @ANYBLOB="0504b9730800c2418f5d0100000008000100", @ANYRES32, @ANYBLOB="b000028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000001003d000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400020000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000a0001"], 0xcc}, 0x1, 0x0, 0x0, 0x44090}, 0x20004080) r8 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000140)=[{0x0}], 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) 3.147705965s ago: executing program 1 (id=557): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x32) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000640)={0xa, 0x14e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/199, 0xc7}], 0x92}, 0x2}], 0x1, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0), 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa20000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) r6 = socket(0xa, 0x80801, 0x100) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20008804) accept4$phonet_pipe(r6, 0x0, 0x0, 0x80800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") r7 = syz_io_uring_setup(0x7272, &(0x7f0000000b80)={0x0, 0x86e4, 0x2, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6200000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8, 0x0, 0x9}, 0x18) io_uring_register$IORING_REGISTER_PROBE(r7, 0x8, 0xfffffffffffffffe, 0x0) 3.147040245s ago: executing program 3 (id=558): mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000001100)={0x4e, 0x1, 0x3, 0x9dff, 0xf, "800300eb00cbe600"}) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0xc0000) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000340)=0x17) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xff) unshare(0x2c060000) unshare(0x2c020400) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x3, 0x0, {0xa, 0x1, 0x0, @mcast2}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="020000000400000006000000050000", @ANYRES32, @ANYBLOB="00000000000080000000000000000000000000002b6c56b2021fcc649c5f8ad1b6dcf3375ffaecd36f4e6bddc1dcab26d17770de12763f2e46b0316089d002c39c0f2ae568f95e4e36c5f4993db5d3f492a6b8d182b8b0b29f86998835b247f7f47130cf8de0ec6124b884de0e23f5b8865aa048976cf93e0081cdb84fb9ddb8b5cacfc50f43b1dd7aa42be7eea49c0c18c0712b7b9cd1d2bd36b65bc3305d089c4f7288e372d0a8d51427dd145f3708e8e3c9a0861cdd0900", @ANYRES64=r2, @ANYBLOB="9d512106ce87b0d961a898493d7037e32477c7860a591d30319fc7bd84c7784a0c97fb14014a3e188f1db379eb522285b18fe2459b03", @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="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"], 0x0, 0xef7, 0x0, 0x0, 0x41100, 0x37119282114edd97, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 3.007146209s ago: executing program 2 (id=562): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r4, 0x0, 0xfffffeea) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x8400, &(0x7f0000001480)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r2, @ANYRES8], 0x0, 0x688, &(0x7f0000000100)="$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") getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e21, @local}}, 0xa0d, 0x7fffffff, 0x8, 0x6}, &(0x7f0000000080)=0x98) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6(0x10, 0x2, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000100030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x3, 0x2, 0x7ffc0002}]}) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) recvmsg$can_bcm(r7, &(0x7f00000012c0)={&(0x7f0000000ac0)=@nfc_llcp, 0x80, &(0x7f0000001140)=[{&(0x7f0000000b40)=""/177, 0xb1}, {&(0x7f0000000c00)=""/203, 0xcb}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/115, 0x73}, {&(0x7f0000000dc0)=""/97, 0x61}, {&(0x7f0000000e40)=""/91, 0x5b}, {&(0x7f0000000ec0)=""/110, 0x6e}, {&(0x7f0000000f40)=""/69, 0x45}, {&(0x7f0000000fc0)=""/247, 0xf7}, {&(0x7f00000010c0)=""/116, 0x74}], 0xa, &(0x7f0000001200)=""/163, 0xa3}, 0x81) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x2) 2.887381911s ago: executing program 3 (id=563): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x2562b0eb07c99df5, r0, 0x1, &(0x7f0000000500)="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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r1, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRESDEC=r0, @ANYRES8, @ANYRESOCT=r1], 0x64}}, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x1f, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702002782613900b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000", @ANYRES32, @ANYBLOB="0000000000000000180000000400000000000000f9ffffff03b205000700000018130000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) r3 = gettid() r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r4, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(r0, &(0x7f0000000080)) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.766169263s ago: executing program 2 (id=564): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'veth0_macvtap\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex=r1, @remote}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00"/12], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r3}, 0x10) ioprio_get$pid(0x3, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)=0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b904020000000080000000001500100014200d00090009000d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92954b43370e970100", 0xd8}], 0x1}, 0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0x8000, 0xa, 0x20002f7}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, r9, 0x1, 0x4}, 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1}}], 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.445177086s ago: executing program 4 (id=567): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0x5, &(0x7f00000000c0)) creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x804) r2 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.335084196s ago: executing program 4 (id=568): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x183, 0x800000006}, 0xe0e5, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b80)=ANY=[@ANYBLOB="28120000", @ANYRES16=r3, @ANYBLOB="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"], 0x1228}}, 0x804) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x3, 0x9, 0x2, 0x2000, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sched_getparam(0x0, &(0x7f0000000540)) r6 = epoll_create(0x3ff) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)={0xa0000000, 0x1b54c8}) r8 = memfd_create(&(0x7f0000001e40)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97x\xdb\x8a\xc8\x8b\x9c\xffr\xeb\xf1\xac\xfb\'@\xeb\xeb\xbfwOK\ae\xd5}\xea\xf7#b\a\x9b\xea\xe0\xfa\xb5T\xe98\x80eR)X\xce\xeaW\x11h\x9f.\x8e\x10U\xc2,t\x82\xe0\x1c\xd7\x02\xc0UY\xce\xd9.\xeb\xa8\xbe\xfe\x02]\xb2\xa8\x84`&\xf4o\xabLY\x01#O\xa6&v<\xb5\x94\xb3\xda\xb2!w\xedF\xe3\xe1fz/\x10\xb3\xed\xdcZ\xb7\xd4\x8bob\x91W>~\x8b\xd3I\xe8 Fn\x02\x910\xef\xda\xae\xf8\xf3\xef\x9cUe\xebj\xe7\xa6\x14\xedl\xd8q\x83\x84\xa7Y\\\f/!\xeb\xebI\xf0\xbe\xa6\x9cK\x99U\x8e\x12F[\x87\x17\x93\x8c\x86\xfe]\xf7\x02\xf5\x86XA\xcd\xc3\xcd2\xc8\xd3\x82\xcfU\x05\xaf', 0x3) write$binfmt_misc(r8, &(0x7f0000000740), 0xff67) lseek(r8, 0x0, 0x3) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x135c, 0x20, &(0x7f0000000240)={0xa1, 0x0, 0x0, 0x55}, 0x8, 0x0, 0x40000, 0x0, 0x4d, 0x4, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) 2.285979101s ago: executing program 2 (id=569): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_io_uring_setup(0x4073, &(0x7f0000000480)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r10}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001a00)=@IORING_OP_ACCEPT={0xd, 0x20, 0x7, 0xffffffffffffffff, &(0x7f0000000900)=0x80, &(0x7f0000000940)=@xdp, 0x0, 0x80000, 0x0, {0x0, r10}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r11, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r12}, 0x18) r13 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x9, 0x1000, &(0x7f0000000a00)=""/4096, 0x41000, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xa, 0xb137, 0xff}, 0x10, 0x2d711, r3, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) sendmsg$tipc(r13, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 2.284214921s ago: executing program 1 (id=570): r0 = geteuid() ioprio_set$uid(0x0, r0, 0x2007) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="070000000400000080000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000018600000030000000000000006000000185a00000e00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$eJzs3b9rVFkUAOAzmcmvbSYsCwvLLjuwLGw1JIHtsyy7bNigYhgkIsGJmUjIhICBgBZJrAQrG0vLdBFBCzv9HwQbG7ERS9NZSJ4kL0xmzEQTMfMk833NPbx7znv33vDeyxRz5/LPiwuzS8tzW1uvY2AgF4Wxq9tJkouh6Il8pNYDADhN3iVJvE1SWY8FAOgM738A6D6Hvf//60nb3rQ5l8XYAICT8eWf/+9OPXlZrY39eYTUpL8Rvpg+/hgBgK9rcuri/9tPfx8cj0d3IhZvrVRWKmmb9v81F/NRj1oMRzHeRyQNafzv+MQ/w6UdgxGVxbW9+rWVSr61fiSKMRRx4czB+pFSqrW+N75rrh+NYvzQ/vqjbev74o/fmurLUYxnV2Ip6jG78y9JU/3qSKn099mJj+r7d/NiI5/p3wcAAAAAAAAAAAAAAAAAAAAAgNOpXGoYard/T7l8WH9af/T9gfb357m9W1+InwpxM9vZAwAAAAAAAAAAAAAAAAAAwLdh+fqNhWq9XrvWCGbOz3/feuRzQa5NV37v/Mc5T9cEOwtzgpf4NSJOehYPN2vPN6YvTWa/mB0M2q/qg8wHNvOJnJ6I2A1+vDdWfbz66s3BnFhvupcL6X1bradtX/PDotThhxMAAAAAAAAAAAAAAAAAAHSZ/a8BH5aRdHZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCB/d//P3bQ1ziyOZierNH1y0Bzctp5v+W6ufUMJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNf6EAAA//9rIKjm") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r5 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) close(r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xb) sendmsg$NFT_BATCH(r7, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x360}, 0x1, 0x0, 0x0, 0x40001}, 0x48040) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r8, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x4cd, &(0x7f0000001180)="$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") socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0\x00'}) 2.260250203s ago: executing program 4 (id=571): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000940)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000280)='sched_switch\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x3e}, @remote, @remote, 0x3, 0x2, 0x0, 0x0, 0xb7, 0x2000213, r5}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1a0000000004000008000000fb00000020000200", @ANYRES32=r0, @ANYBLOB="00000000d6b86e78950c78655bb2", @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="03000000030000000400"/28], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x0, &(0x7f0000000040), 0x1, 0xba6, &(0x7f0000000c00)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[], 0x5c, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) accept4(r1, &(0x7f0000000640)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, &(0x7f0000000780)=0x80, 0x800) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000880)=0x0) capget(&(0x7f00000008c0)={0x19980330, r6}, &(0x7f0000000900)={0x115, 0xc5f, 0x0, 0x5, 0x100, 0x9}) pwritev(0xffffffffffffffff, &(0x7f0000001a00)=[{&(0x7f0000000ac0)="37fe984c26016db58b12ae0f318d36cfa5a6918e70183fd13438811edb6a15f0c71e38752c5121dfa4197271c34a70eca5263fb335", 0x35}, {&(0x7f00000017c0)="24e2584fb9e1b525415f6e31e977b51cb525284b0921a9ad8d5b749748ace38f60d1605ff3e513132c999ad1dfc7475980ccc0f3835c2fbca980c23784a2dacc4c8d20e06b97f0f94beefd0375d447792f5a49e4ee86cdeb1ea326c320726bb2c23a1cfc1c8a823f24478023e0f1ed2940cd699f", 0x74}, {&(0x7f0000000bc0)="86b4fbd964124f858ab3dbaa87ab597656b08f3668cf41641bbf0989187428cea0441b867f1a88d97bdd69b368c33be0a6ae191222a03c3c3dc1bb", 0x3b}, {&(0x7f0000001840)="8f45fb3cd4882fad50e07fd1a057b6969490ea2266d32a697d6f4f3cd557fe72e0b78e96b075869b45a582e3014e9ea2d7481c693c88d4589f70d87a72f6db6a705041e1640119f264", 0x49}, {&(0x7f00000018c0)}, {&(0x7f0000001900)="b2c8114ed7b5076c8dc722474975b38de169d17e584e39ae0c6b02fce3e6e770", 0x20}, {&(0x7f0000001940)="f6c90e40d29aefdf0308c5eeb6dd7ac47bb947bca23d76d4bcfa42d816397fc957f9437b4ba9b3bc932afcaf95912549ee0c35cc215338e4018a38cba57e6449a0eb13c79afd755c2417c53230d4c8210a573b758e5b52020c58202d3d2df941678dc1c171ae08fb0bf20092880849ee193a4cbd0a41672d84d9468db4b835fd0e9d16f2b642a7eadf6d625f169a569c48c0918fb9879630b75c8bfef3cff87eefc290b1a8a6bd00333ffd2d0f98505bb08beaa4692243fd9598", 0xba}], 0x7, 0x7fffffff, 0x0) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 2.187133551s ago: executing program 2 (id=572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYRES8=r0, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10007ffffffff}, 0x18) r3 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@loopback, 0x4e24, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x802, 0x9141, 0x0, 0xfffffffffffffffc, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@remote, 0x3501, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) syz_open_procfs(r3, &(0x7f0000000300)='net/ip_tables_names\x00') r9 = socket(0x10, 0x3, 0x9) connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000000), 0xfd, 0x477, &(0x7f0000000880)="$eJzs3M9vVEUcAPDv2/7gt62IP0CUKhobjS0tqBw8gNHEgyYmesBjbQsiCzW0GiFEVw94NCTejUcT/wJPejHqycSr3g0JMVxAvTzzdt9rd5fddSlbF9zPJ1k68+YtM9+dN7szb7oNYGBNZP8kEdsj4teIGKtlG0+YqP24fvXC/J9XL8wnkaav/5FUz7t29cJ8cWrxvG1FptJ4vN7yufOn5srlxbN5fnrl9LvTy+fOP33y9NyJxROLZ2YPHz50cOa5Z2ef6UmcWZuu7flwae/ul9+89Or8sUtv/fh1UsTfEMf73f+nmzuWTrQ4NlQkHu++ljvCjrp0MtzHhnBT3o6IrLtGquN/LIZirfPG4qVP+to4YEOlaZpual9cSYH/sST63QKgP/LP+SSiMp+tgevX84PgytHaAiiL+3r+qJUMRyk/Z6RpfdtL2WrrWOWvL7JHNN1PAQDYCN8erf0s5n5r849Sw138I/ne0HhE3B0ROyPinojYFRH3RsR9EXF/RDxQ95xW+z7NmjdJbpz/lC6vK7AuZfO/5/O9rcb5XzH7i/GhPLejGv9IcvxkefFARNwVEZMxsinLz3So47sXf/msXdlE3fwve2T1F3PBvB2Xh5tu0C3MrczdSsz1rnwcsWe4VfzJ6k5A1o+7I2LPvvXVcfLJr/a2K/v3+DvowT5T+mXEE7X+r0RT/IWk8/7k9OYoLx6YLq6KG/3088XX2tV/S/H3QNb/W1te/6vxjyf1+7XLN1/Hxd8+bbum6fL6H61/Tnb9jyZvVNNFwQdzKytnZyJGk1fy40fy4431Vc+bXTs/i39yf+vxvzPWXokHIyK7iB+KiIcjYl/e9kci4tGI2N8h/h9eeOyd9ce/sbL4F26q/9smir3tG4qGTn3/TbWk6KzxDvEn0aL/D1VTk/mRbt7/Orb07K1czQAAAHDnKUXE9khKU6vpUmlqqvb78rtia6m8tLzy1PGl984s1L4jMB4jpeJO19jq/dCozOTL+uL+6GxT/mB+3/jzoS3V/NT8Unmh38HDgNvWZvxnfh/qd+uADef7WjC41jv+0zT9qMdNAf5jPv9hcBn/MLhajP8tTfkOfyMAuJO1+vy3sIfBYP4Pg8v4h8Fl/MPgMv5hIOXfhB/u5gv+G5bI3n/6V3s3iWhoYZr2qRmjt8erUU1EqW+1xzqfPtmnV+zv/I9t3h4d12Wi3+9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvfFPAAAA//89VeJz") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') 2.066259813s ago: executing program 3 (id=573): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, 0x0, &(0x7f0000000340)=r7}, 0x20) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000400)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYRES16=r9], 0x6, 0x2d4, &(0x7f00000006c0)="$eJzs3T9rZFUUAPDzkjdvZlWYKaxE8IEWVutmW5sJsgExlUsKtdDg7oJkgrALAf/g7Fa2NhYWfgJB8IPY+A0EW8HOVRauvH/MSzKJO8GJaH6/Jod7z3n3vJdL8lLkzgcvHh7cKePeo89/jtEoi41pTONxFpPYiM7DOGb6VQAA/2WPU4rfUuPMpOdOD2URMVpvawDAmpz9+7/sxfki/OHSWgMA1uT2O+++tb27e+vtshzFzuGXR3vVX/bV12Z++158FLO4GzdiHE8i6heFQdRvC1W4k1Ka52VlEq8czo/2qsrD939sr7/9a0RdvxXjmNRDKaW8C9LOm7u3tspGr35e9fFMu/60qr8Z43i+Xb99W+nqby6pj70iXn251//1GMdPH8bHMYs79dqL+i+2yvKN9PXvn71XdVXVZ/OjvWGdt5A2L/UbAwAAAAAAAAAAAAAAAAAAAADA/9r19uycYZSTP5szANvzdzafVPODKDuT4+fzNPVZd6H++UAppXmKb7vzdW6UZZnaxEV9Hi/k/YMFAQAAAAAAAAAAAAAAAAAA4Op68MmnB/uz2d37Fw6uxWKkOw0gj4g/bkdc9MrT3shLUQf5Wa0O2zX3Z7ONNjyek/dHYrPLySLObaO6iYs/loNVkq+d6rkNvvt+1dVHf58zWL7WPxl0u+tgP1v+DIfRjYzaTfJNEb2NVMRTrlWcNZVile1XLJ0ar3zvxbN1MD8nJ7LzGnv9l+bJtSPZybso6qfajLw2aHLbqUGb0ys/sTeeaj/HqCk//bMic1oHAAAAAAAAAAAAAAAAAACs1eK/f5dMPjq3dCMN19YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyqxef/rxDM2+KTU/GwGe8lF3H/wb95fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwNfwUAAP//ThJUUw==") keyctl$revoke(0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000000c0)=0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2.032273137s ago: executing program 0 (id=574): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r4, 0x0, 0xfffffeea) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x8400, &(0x7f0000001480)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r2, @ANYRES8], 0x0, 0x688, &(0x7f0000000100)="$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") getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e21, @local}}, 0xa0d, 0x7fffffff, 0x8, 0x6}, &(0x7f0000000080)=0x98) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6(0x10, 0x2, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000100030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x3, 0x2, 0x7ffc0002}]}) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) recvmsg$can_bcm(r7, &(0x7f00000012c0)={&(0x7f0000000ac0)=@nfc_llcp, 0x80, &(0x7f0000001140)=[{&(0x7f0000000b40)=""/177, 0xb1}, {&(0x7f0000000c00)=""/203, 0xcb}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/115, 0x73}, {&(0x7f0000000dc0)=""/97, 0x61}, {&(0x7f0000000e40)=""/91, 0x5b}, {&(0x7f0000000ec0)=""/110, 0x6e}, {&(0x7f0000000f40)=""/69, 0x45}, {&(0x7f0000000fc0)=""/247, 0xf7}, {&(0x7f00000010c0)=""/116, 0x74}], 0xa, &(0x7f0000001200)=""/163, 0xa3}, 0x81) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) fcntl$setlease(r7, 0x400, 0x1) 1.870988373s ago: executing program 1 (id=575): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x4000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r1 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='attr\x00') unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x200) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000880)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000800)={0x7, &(0x7f00000007c0)=[{0x0, 0x40, 0x9, 0x6}, {0x7, 0x4f, 0xd7, 0x6}, {0x5, 0x0, 0x6, 0xebf6}, {0x0, 0xf9, 0x9, 0x4}, {0xf7a0, 0x3, 0x1, 0x2}, {0x1, 0x81, 0x81, 0x1}, {0x1000, 0x5, 0x6, 0x100}]}) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) close(r5) 1.725718787s ago: executing program 0 (id=576): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_timeval(r2, 0x1, 0xa, &(0x7f0000000200), &(0x7f0000000400)=0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0x1, 0x0, 0x0, 0x727c45cd4283345, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$BLKTRACESETUP(r6, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r4}, 0x18) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) rmdir(0x0) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) io_uring_register$IORING_REGISTER_CLOCK(r3, 0x1d, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 1.550213515s ago: executing program 2 (id=577): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = io_uring_setup(0x4d3f, &(0x7f0000000d80)={0x0, 0xca6a, 0x20, 0x2003, 0x2f8}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480), 0x66) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x72, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r4, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[], 0x64}}, 0x0) r5 = gettid() r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone(0x80308400, &(0x7f0000000440)="344f00805feeeabca054883ff05bfcd5a56c3a1547ae3113ef67df05fd5d768054ab2e5e6435d22c36da91daf138d55506b219938774dbcdf9786c002f782de5f1217e284a847add180c4fb8e55f615a5081e02fa1767884a2daca5f2c21cb43d8d8e3a413335386fef0f86a8911301433694b9cc16854ab9dcd27c03da70b36d20be499e3950f01966d1ebeebb6a6d7b721635c512f2bdbc977e11acbed5a957f2afcac9103a612a2ca7246529906f636947b02574836d87a0ddd251a95d6c1de1514abbea8632b798512e747", 0xcd, 0x0, &(0x7f0000000200), &(0x7f00000009c0)="db3a34addb368c988c7e7c1e2deea367981a2d96d0b530d294b9c38a16a4548147f3be5e5b3a446458bec7d77bcdc2c585e337aa49d82e85beabb2e1db7e3913c216a3959541b8b7081b9a8a8af2c29a1243c46d61dcc9b81bdb7d38f31e67287d4431247b77ae415e5d612d0258319e1af64820bd724ce38126a4877dd05c859163391cdca45a30aaf5ba5ca84a41ea6061ecebea550bb8aac017e29d6c7ab60d18e8e5c68228955a08d5b73f58154b564da443203a3a36d0ca5c1658ac572a3c7b270f0c") read$ptp(r6, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) syz_open_procfs(0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16}) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@dioread_nolock}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@errors_continue}]}, 0x1, 0x476, &(0x7f0000000540)="$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") chmod(&(0x7f0000000000)='./file0\x00', 0x60) 1.355427915s ago: executing program 4 (id=578): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) link(0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r5, 0x737f92dba6bf2ad6, 0x8, 0x5, 0x9, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast2, 0x40, 0x80, 0xff, 0x7f}}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', &(0x7f0000000100), 0x2000080, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000e1ff00000017"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000500)='kmem_cache_free\x00', r4, 0x0, 0x6}, 0xfffffffffffffffd) shmdt(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 1.144192905s ago: executing program 0 (id=579): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'pimreg\x00'}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0xe, 0x800, 0xd, 0xffff, 0x0, "4ae23ae17df2e98c69ba31c4095c911abad88f", 0x2000}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) statfs(&(0x7f0000000200)='.\x00', 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x44) sendmsg$sock(r3, &(0x7f0000000bc0)={&(0x7f0000000500)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000580)=[{0x0}], 0x1, &(0x7f0000000ac0)}, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'pimreg1\x00', 0x200}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.056948464s ago: executing program 0 (id=580): r0 = syz_io_uring_setup(0x88f, &(0x7f00000008c0)={0x0, 0xaee2, 0x80, 0x2, 0x41f9}, &(0x7f0000000280)=0x0, &(0x7f0000000680)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) syz_io_uring_complete(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) pipe2(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc41e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000700)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4), 0x0, 0xfffffff3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x200f}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x2388, 0x0, 0x0, 0x0) 698.6808ms ago: executing program 4 (id=581): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f0000010000000000fff7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000021c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x2, 0xfffffffe, 0xb84, 0x7, 0x5, 0x0, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x800, 0xffffffff, 0x0, 0xffff18e5, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x4000201, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x4000, 0x20000000, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0xffffffff, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x0, 0xfffffffc, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdc, 0x10000000, 0x7fffffff, 0x6, 0xfffffffd, {0x6, 0x2, 0x1, 0x401, 0x1, 0x22}, {0x9a, 0x0, 0x40, 0x5, 0x400}, 0x5, 0x2, 0x81}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x48, 0x2, 0xffffffff, 0x5, 0x1ff, 0x5ae, 0x2, 0x742, 0x8001, 0x7f5d, 0x8, 0xc17, 0xffff, 0x7, 0x81, 0xfd3, 0x10001, 0x1, 0x7ff, 0x4, 0x5, 0x2, 0x563, 0x78, 0x0, 0x6, 0x101, 0x7, 0x1, 0x6, 0x9, 0xffff0001, 0x9, 0xb, 0x7, 0x0, 0xf2, 0x5, 0x80000000, 0x10000, 0x6, 0x3, 0x0, 0xcbcf, 0x0, 0x2, 0xffffffff, 0x247, 0x2, 0x7, 0x9, 0x80, 0x763, 0x8001, 0x92, 0x7ff, 0x6271, 0x401, 0x4, 0x8, 0x3, 0x0, 0x1cb0, 0x1, 0x200, 0xffffffc0, 0xf, 0x5, 0x2db8, 0x5, 0xa, 0xfff, 0x401, 0x2c38, 0x8, 0xe7e, 0x3, 0x7, 0xc, 0xf1, 0x7, 0xffffff81, 0x9, 0x2, 0x3, 0x8ed, 0x0, 0x0, 0x80, 0x9, 0x7, 0x1, 0x8001, 0x7, 0xaee71ed, 0x3, 0x1, 0xa596, 0x7fffffff, 0xfffffffb, 0x7, 0x800, 0x2, 0x3, 0x2000, 0xa, 0xaa7, 0x5, 0xffffffff, 0x9, 0x10000, 0x528, 0x0, 0xfa, 0x10001, 0x3, 0x101, 0x4, 0x2, 0x5, 0x0, 0x6, 0x4, 0x9, 0x3, 0x40, 0xfff, 0x100000, 0x8001, 0x7, 0x800, 0xe4, 0x2, 0x4, 0xbe2, 0x5, 0x2, 0xb, 0x5, 0x5, 0x9, 0xffffffff, 0xfffffffd, 0x1, 0xffff5a86, 0x0, 0x3, 0x5b, 0x1, 0xb, 0x10000, 0x4, 0x1ff, 0x8, 0x7, 0x5, 0x0, 0x0, 0x10001, 0xfff, 0xaa, 0xffffdcad, 0x0, 0xffff65bd, 0x9, 0x3, 0x6, 0x8, 0x7, 0x280000, 0xc, 0x1, 0xfffff38f, 0x401, 0xffffffff, 0xe6da, 0x8, 0x7fff, 0xe442, 0x8, 0xb6a, 0xc874, 0xea22, 0x1000, 0xffffffff, 0x9, 0x3, 0x5, 0x6, 0x97a, 0x7f, 0x400, 0x1, 0x6, 0x90, 0x6, 0x1, 0x8, 0x55e, 0xffff, 0x5, 0xfff, 0x5, 0x8, 0x2000000, 0x6, 0x7, 0x4, 0x0, 0x5, 0xc17, 0x3, 0x7, 0x80000000, 0x8, 0x8001, 0x10001, 0xfffffffb, 0x2, 0x2, 0x89, 0x1, 0x4, 0x1, 0x78, 0x5, 0x3, 0xd, 0x3, 0x9, 0x5, 0x2, 0x6, 0x94, 0x200, 0x8, 0xfffffffb, 0x2000, 0x4, 0xf443, 0x1bf2, 0x6, 0xffffffa9, 0x7f, 0x1, 0x7, 0x7, 0x7, 0x7ff, 0x6810012e, 0x2800000, 0x9, 0x6, 0x9, 0x3]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x88c}}, 0xc0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) clock_settime(0x0, &(0x7f0000000040)={r1, r2+10000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) 550.447345ms ago: executing program 0 (id=582): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x2}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r7, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20000, 0x71) pread64(r8, &(0x7f0000001440)=""/126, 0x7e, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x28, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) 392.853481ms ago: executing program 4 (id=583): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x2562b0eb07c99df5, r0, 0x1, &(0x7f0000000500)="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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r1, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRESDEC=r0, @ANYRES8, @ANYRESOCT=r1], 0x64}}, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x1f, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702002782613900b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000", @ANYRES32, @ANYBLOB="0000000000000000180000000400000000000000f9ffffff03b205000700000018130000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) r3 = gettid() r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r4, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(r0, &(0x7f0000000080)) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 289.925171ms ago: executing program 3 (id=584): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000780)}, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0xffffffffffffff02, 0x28, 0x1, 0x4, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x26d0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700000080004f86262a0f9793eb00000001140003000000000000fa534db81f1a83d6c868048006a7cfb4000000000000000000"], 0x50}}, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") 3.25072ms ago: executing program 2 (id=585): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r0 = creat(&(0x7f0000000000)='./control\x00', 0x22) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, 0x0, 0xc8) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x5}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000440)='.\x00', 0x10000823) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000140)='./control\x00', 0x400, 0x7ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00'], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffd}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) tee(r6, 0xffffffffffffffff, 0x3, 0x0) 0s ago: executing program 1 (id=586): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000940)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000280)='sched_switch\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x3e}, @remote, @remote, 0x3, 0x2, 0x0, 0x0, 0xb7, 0x2000213, r5}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1a0000000004000008000000fb00000020000200", @ANYRES32=r0, @ANYBLOB="00000000d6b86e78950c78655bb2", @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="03000000030000000400"/28], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x0, &(0x7f0000000040), 0x1, 0xba6, &(0x7f0000000c00)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) capget(&(0x7f00000008c0)={0x19980330}, &(0x7f0000000900)={0x115, 0xc5f, 0x0, 0x5, 0x100, 0x9}) kernel console output (not intermixed with test programs): .87: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 45.861407][ T4055] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 45.939478][ T4056] netlink: 'syz.2.93': attribute type 27 has an invalid length. [ 46.019536][ T4058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'. [ 46.136945][ T4056] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 46.188353][ C1] hrtimer: interrupt took 37637 ns [ 46.365546][ T4057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.384189][ T4057] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.403404][ T4057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 46.421019][ T2967] wg1 speed is unknown, defaulting to 1000 [ 46.426977][ T2967] syz0: Port: 1 Link DOWN [ 46.431365][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.443280][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.461467][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.479615][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.583195][ T4071] batman_adv: batadv0: Removing interface: veth1_vlan [ 46.773477][ T4082] loop4: detected capacity change from 0 to 2048 [ 46.813678][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.881393][ T3492] Alternate GPT is invalid, using primary GPT. [ 46.887818][ T3492] loop4: p1 p2 p3 [ 46.961075][ T4082] Alternate GPT is invalid, using primary GPT. [ 46.967444][ T4082] loop4: p1 p2 p3 [ 47.273694][ T4138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.327683][ T4138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.342438][ T4138] bond0 (unregistering): Released all slaves [ 47.363273][ T4139] bridge0: entered promiscuous mode [ 47.610514][ T4181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.646436][ T4181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.732883][ T4184] loop4: detected capacity change from 0 to 8192 [ 47.814616][ T4199] loop4: detected capacity change from 0 to 164 [ 47.836198][ T4202] netem: change failed [ 47.847638][ T4202] netlink: 'syz.1.106': attribute type 10 has an invalid length. [ 47.859184][ T4202] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.877306][ T29] kauditd_printk_skb: 7781 callbacks suppressed [ 47.877324][ T29] audit: type=1326 audit(1763246954.934:10258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 47.907474][ T4202] loop1: detected capacity change from 0 to 1024 [ 47.928447][ T29] audit: type=1326 audit(1763246954.934:10259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 47.952075][ T29] audit: type=1326 audit(1763246954.934:10260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 47.975598][ T29] audit: type=1326 audit(1763246954.934:10261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f520177f703 code=0x7ffc0000 [ 47.998868][ T29] audit: type=1326 audit(1763246954.944:10262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f520177e17f code=0x7ffc0000 [ 48.022269][ T29] audit: type=1326 audit(1763246954.944:10263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f520177f757 code=0x7ffc0000 [ 48.045717][ T29] audit: type=1326 audit(1763246954.964:10264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f520177df10 code=0x7ffc0000 [ 48.069202][ T29] audit: type=1326 audit(1763246954.964:10265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f520177f2cb code=0x7ffc0000 [ 48.092905][ T29] audit: type=1326 audit(1763246954.974:10266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f520177e32a code=0x7ffc0000 [ 48.096283][ T4202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.116190][ T29] audit: type=1326 audit(1763246954.974:10267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f520177e32a code=0x7ffc0000 [ 48.202690][ T4199] netlink: 'syz.4.105': attribute type 13 has an invalid length. [ 48.205365][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.220432][ T4199] gretap0: refused to change device tx_queue_len [ 48.230193][ T4199] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 48.259506][ T4210] : renamed from vlan1 (while UP) [ 48.271476][ T4215] bond0: mtu less than device minimum [ 48.361692][ T4220] infiniband !yz!: set active [ 48.366555][ T4220] infiniband !yz!: added team_slave_0 [ 48.387752][ T4220] RDS/IB: !yz!: added [ 48.393333][ T4220] smc: adding ib device !yz! with port count 1 [ 48.401641][ T4220] smc: ib device !yz! port 1 has no pnetid [ 48.462747][ T4234] loop3: detected capacity change from 0 to 8192 [ 48.473896][ T4234] msdos: Unknown parameter 'U־7g [ 48.473896][ T4234] 9JWAmFU`^sd?V/D“dW՛ N{>q䍁by&f>`% J^PeUUXut _Od9g_3}X' [ 48.493624][ T4236] team0: Port device team_slave_1 removed [ 48.545803][ T4247] loop3: detected capacity change from 0 to 512 [ 48.620962][ T4247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.645605][ T4247] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.663582][ T4247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.831331][ T4267] __nla_validate_parse: 10 callbacks suppressed [ 48.831347][ T4267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 48.847931][ T4267] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.118' sets config #1 [ 48.982785][ T4279] xt_hashlimit: max too large, truncated to 1048576 [ 48.990340][ T4279] xt_CT: You must specify a L4 protocol and not use inversions on it [ 49.004043][ T4279] netlink: 'syz.0.121': attribute type 4 has an invalid length. [ 49.396559][ T4286] loop3: detected capacity change from 0 to 512 [ 49.403668][ T4286] journal_path: Non-blockdev passed as './bus' [ 49.410047][ T4286] EXT4-fs: error: could not find journal device path [ 49.912711][ T4321] loop1: detected capacity change from 0 to 8192 [ 49.913259][ T4321] msdos: Unknown parameter 'U־7g [ 49.913259][ T4321] 9JWAmFU`^sd?V/D“dW՛ N{>q䍁by&f>`% J^PeUUXut _Od9g_3}X' [ 50.380129][ T4335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 50.389593][ T4335] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.131' sets config #1 [ 50.575633][ T4341] loop1: detected capacity change from 0 to 8192 [ 50.696870][ T4357] loop4: detected capacity change from 0 to 512 [ 50.728295][ T4357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.747309][ T4357] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.109189][ T4385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 51.172513][ T4385] netlink: 120 bytes leftover after parsing attributes in process `syz.3.142'. [ 51.214094][ T4393] loop3: detected capacity change from 0 to 2048 [ 51.266699][ T3492] Alternate GPT is invalid, using primary GPT. [ 51.273166][ T3492] loop3: p2 p3 p7 [ 51.284908][ T4393] Alternate GPT is invalid, using primary GPT. [ 51.291456][ T4393] loop3: p2 p3 p7 [ 51.531270][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 51.545442][ T4425] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.145' sets config #1 [ 51.584021][ T4431] loop4: detected capacity change from 0 to 8192 [ 52.258418][ T4445] loop4: detected capacity change from 0 to 1024 [ 52.258869][ T4445] EXT4-fs: Ignoring removed orlov option [ 52.287827][ T4445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.339860][ T4445] wg1 speed is unknown, defaulting to 1000 [ 52.446059][ T4481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.150'. [ 52.462457][ T4481] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 52.706783][ T4445] netlink: 'syz.4.159': attribute type 10 has an invalid length. [ 52.711032][ T4445] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.159: inode has both inline data and extents flags [ 52.774871][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.852978][ T4498] loop1: detected capacity change from 0 to 1024 [ 52.855511][ T4498] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.855544][ T4498] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 52.857768][ T4498] JBD2: no valid journal superblock found [ 52.857845][ T4498] EXT4-fs (loop1): Could not load journal inode [ 52.880643][ T4506] loop4: detected capacity change from 0 to 2048 [ 52.922227][ T3492] Alternate GPT is invalid, using primary GPT. [ 52.937697][ T3492] loop4: p2 p3 p7 [ 52.952625][ T4506] Alternate GPT is invalid, using primary GPT. [ 52.952823][ T4506] loop4: p2 p3 p7 [ 52.971065][ T29] kauditd_printk_skb: 2366 callbacks suppressed [ 52.971078][ T29] audit: type=1400 audit(52.936:12634): avc: denied { write } for pid=4505 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.977585][ T29] audit: type=1400 audit(52.936:12635): avc: denied { read } for pid=4505 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.223792][ T29] audit: type=1326 audit(53.186:12636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 53.224009][ T29] audit: type=1326 audit(53.186:12637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 53.226918][ T29] audit: type=1326 audit(53.196:12638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 53.304906][ T29] audit: type=1326 audit(53.226:12639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52017b1f85 code=0x7ffc0000 [ 53.304945][ T29] audit: type=1326 audit(53.266:12640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 53.304987][ T29] audit: type=1326 audit(53.266:12641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 53.305018][ T29] audit: type=1326 audit(53.266:12642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 53.305042][ T29] audit: type=1326 audit(53.266:12643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 53.364173][ T4540] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 53.462824][ T3492] udevd[3492]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 53.462894][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 53.465081][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 53.531666][ T4540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.161'. [ 53.765271][ T4564] netlink: 'syz.3.164': attribute type 27 has an invalid length. [ 53.798088][ T4564] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.805329][ T4564] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.277051][ T4564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.288434][ T4564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.350004][ T4569] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.369707][ T4569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.386977][ T4575] lo speed is unknown, defaulting to 1000 [ 54.416184][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.427073][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.457841][ T4575] lo speed is unknown, defaulting to 1000 [ 54.467362][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.476313][ T4575] lo speed is unknown, defaulting to 1000 [ 54.477374][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.497056][ T4602] IPv6: Can't replace route, no match found [ 54.504678][ T4602] netlink: 'syz.3.167': attribute type 3 has an invalid length. [ 54.515064][ T4575] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 54.532707][ T4575] lo speed is unknown, defaulting to 1000 [ 54.593081][ T4575] lo speed is unknown, defaulting to 1000 [ 54.606258][ T4575] lo speed is unknown, defaulting to 1000 [ 54.634894][ T4575] lo speed is unknown, defaulting to 1000 [ 54.652273][ T4575] lo speed is unknown, defaulting to 1000 [ 54.658727][ T4575] lo speed is unknown, defaulting to 1000 [ 54.682555][ T4618] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 54.704180][ T4618] bond0: entered promiscuous mode [ 54.710748][ T4618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.740878][ T4618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.749236][ T4618] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 54.759873][ T4618] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 54.772811][ T4618] bond0: (slave wireguard0): making interface the new active one [ 54.780676][ T4618] wireguard0: entered promiscuous mode [ 54.786997][ T4657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 54.794230][ T4657] IPv6: NLM_F_CREATE should be set when creating new route [ 54.801489][ T4657] IPv6: NLM_F_CREATE should be set when creating new route [ 54.811250][ T4618] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 54.823389][ T4657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 54.835512][ T4657] bond0: (slave wireguard1): The slave device specified does not support setting the MAC address [ 54.872264][ T4657] bond0: (slave wireguard1): Enslaving as a backup interface with an up link [ 55.802204][ T4685] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 55.857486][ T4696] ip6gretap0: entered promiscuous mode [ 55.870873][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 55.987238][ T4696] ip6gretap0 (unregistering): left promiscuous mode [ 56.867226][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 56.885304][ T4715] loop2: detected capacity change from 0 to 8192 [ 56.941162][ T4726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.190'. [ 56.996331][ T4714] lo speed is unknown, defaulting to 1000 [ 57.039111][ T4721] loop3: detected capacity change from 0 to 1024 [ 57.041989][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 57.056589][ T4721] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.065031][ T4753] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 57.067626][ T4721] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 57.074753][ T4753] IPv6: NLM_F_CREATE should be set when creating new route [ 57.095739][ T4721] JBD2: no valid journal superblock found [ 57.101506][ T4721] EXT4-fs (loop3): Could not load journal inode [ 57.253031][ T4777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 57.274193][ T4777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.281794][ T4777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.290540][ T4777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.298141][ T4777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.311320][ T4782] loop2: detected capacity change from 0 to 512 [ 57.348341][ T4782] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.183: inode #0: comm syz.2.183: iget: illegal inode # [ 57.400128][ T4782] EXT4-fs (loop2): get orphan inode failed [ 57.412974][ T4782] EXT4-fs (loop2): mount failed [ 57.466608][ T4773] lo speed is unknown, defaulting to 1000 [ 57.561558][ T4827] IPv6: NLM_F_CREATE should be specified when creating new route [ 57.671174][ T4835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 57.741984][ T4837] netlink: 14 bytes leftover after parsing attributes in process `syz.0.191'. [ 57.756480][ T4838] netlink: 184 bytes leftover after parsing attributes in process `syz.4.192'. [ 57.837207][ T4837] bond0 (unregistering): Released all slaves [ 57.844552][ T4856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.857587][ T4856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.183280][ T4772] syz.2.183 (4772) used greatest stack depth: 6280 bytes left [ 58.216105][ T29] kauditd_printk_skb: 996 callbacks suppressed [ 58.222337][ T29] audit: type=1326 audit(58.184:13640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4857 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9e31f6c9 code=0x7ffc0000 [ 58.245217][ T29] audit: type=1326 audit(58.184:13641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4857 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9e31f6c9 code=0x7ffc0000 [ 58.275841][ T29] audit: type=1400 audit(58.244:13642): avc: denied { create } for pid=4899 comm="syz.4.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.294808][ T29] audit: type=1400 audit(58.244:13643): avc: denied { bind } for pid=4899 comm="syz.4.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.347668][ T29] audit: type=1326 audit(58.314:13644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 58.370550][ T29] audit: type=1326 audit(58.314:13645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 58.393323][ T29] audit: type=1326 audit(58.314:13646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 58.416077][ T29] audit: type=1326 audit(58.314:13647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9f089af703 code=0x7ffc0000 [ 58.682539][ T29] audit: type=1326 audit(58.654:13648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9f089ae17f code=0x7ffc0000 [ 58.752832][ T29] audit: type=1326 audit(58.724:13649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 59.058617][ T4908] loop2: detected capacity change from 0 to 8192 [ 59.963933][ T4922] lo speed is unknown, defaulting to 1000 [ 60.331892][ T4962] netlink: 'syz.1.200': attribute type 10 has an invalid length. [ 60.352068][ T4950] loop2: detected capacity change from 0 to 1024 [ 60.353374][ T4962] ipvlan0: entered allmulticast mode [ 60.363865][ T4962] veth0_vlan: entered allmulticast mode [ 60.371299][ T4950] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.382251][ T4950] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 60.398708][ T4962] team0: Device ipvlan0 failed to register rx_handler [ 60.405631][ T4950] JBD2: no valid journal superblock found [ 60.411399][ T4950] EXT4-fs (loop2): Could not load journal inode [ 60.460110][ T4954] lo speed is unknown, defaulting to 1000 [ 61.135722][ T5001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.205'. [ 61.183000][ T5002] netlink: 60 bytes leftover after parsing attributes in process `syz.0.204'. [ 61.192534][ T5002] IPVS: Unknown mcast interface: [ 61.214545][ T5023] netlink: 184 bytes leftover after parsing attributes in process `syz.3.205'. [ 61.293265][ T5028] siw: device registration error -23 [ 61.392997][ T5036] bridge0: entered promiscuous mode [ 61.623243][ T5040] netlink: 'syz.0.220': attribute type 27 has an invalid length. [ 61.810035][ T5039] loop3: detected capacity change from 0 to 512 [ 62.197917][ T5039] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.207: inode #0: comm syz.3.207: iget: illegal inode # [ 62.398745][ T5039] EXT4-fs (loop3): get orphan inode failed [ 62.470074][ T5039] EXT4-fs (loop3): mount failed [ 62.664136][ T5040] batman_adv: batadv0: Interface deactivated: vxlan0 [ 62.705931][ T5096] 9pnet_fd: Insufficient options for proto=fd [ 62.716241][ T5044] bridge0: left promiscuous mode [ 62.722632][ T5044] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.732716][ T5044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.751350][ T5037] lo speed is unknown, defaulting to 1000 [ 62.891656][ T5093] bridge2: entered promiscuous mode [ 62.898216][ T31] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.907165][ T31] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.944342][ T31] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.953312][ T31] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.985427][ T5124] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 63.001519][ T31] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.010503][ T31] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.028210][ T5124] netlink: 4788 bytes leftover after parsing attributes in process `syz.2.216'. [ 63.037720][ T5124] netlink: 4788 bytes leftover after parsing attributes in process `syz.2.216'. [ 63.047139][ T31] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.056073][ T31] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.058824][ T5109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.088135][ T5109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.193238][ T5146] loop2: detected capacity change from 0 to 512 [ 63.224263][ T5146] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.217: bg 0: block 248: padding at end of block bitmap is not set [ 63.251792][ T29] kauditd_printk_skb: 758 callbacks suppressed [ 63.251804][ T29] audit: type=1326 audit(63.224:14408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9e31f6c9 code=0x7ffc0000 [ 63.280813][ T29] audit: type=1326 audit(63.224:14409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9e31f6c9 code=0x7ffc0000 [ 63.309825][ T5146] Quota error (device loop2): write_blk: dquota write failed [ 63.317317][ T5146] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 63.344524][ T5146] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.217: Failed to acquire dquot type 1 [ 63.357265][ T29] audit: type=1326 audit(63.284:14410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9e31f6c9 code=0x7ffc0000 [ 63.380046][ T29] audit: type=1326 audit(63.284:14411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9e31f6c9 code=0x7ffc0000 [ 63.402960][ T29] audit: type=1326 audit(63.284:14412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f9e9e31f6c9 code=0x7ffc0000 [ 63.419598][ T5146] EXT4-fs (loop2): 1 truncate cleaned up [ 63.425802][ T29] audit: type=1326 audit(63.284:14413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9e31f6c9 code=0x7ffc0000 [ 63.432005][ T5146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.454182][ T29] audit: type=1326 audit(63.284:14414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9e31f6c9 code=0x7ffc0000 [ 63.489364][ T29] audit: type=1326 audit(63.284:14415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9e31f6c9 code=0x7ffc0000 [ 63.597340][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.671955][ T5160] pimreg: entered allmulticast mode [ 63.685434][ T5160] pimreg: left allmulticast mode [ 63.779824][ T5166] lo speed is unknown, defaulting to 1000 [ 64.130819][ T5199] loop2: detected capacity change from 0 to 8192 [ 64.181719][ T5207] loop3: detected capacity change from 0 to 2048 [ 64.194140][ T5207] EXT4-fs: Ignoring removed i_version option [ 64.225858][ T5207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.241511][ T5207] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.225: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 64.259626][ T5207] EXT4-fs (loop3): Remounting filesystem read-only [ 64.293868][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.360250][ T5203] lo speed is unknown, defaulting to 1000 [ 64.416302][ T5228] netlink: 'syz.3.228': attribute type 2 has an invalid length. [ 64.424039][ T5228] netlink: 'syz.3.228': attribute type 2 has an invalid length. [ 64.431732][ T5228] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 64.439399][ T5228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 64.560811][ T5250] bridge1: entered promiscuous mode [ 64.607910][ T5250] 9pnet_fd: Insufficient options for proto=fd [ 64.908318][ T5263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.010959][ T5263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.162522][ T5279] netlink: 'syz.1.233': attribute type 39 has an invalid length. [ 65.733983][ T5297] loop3: detected capacity change from 0 to 1024 [ 65.742964][ T5302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.751958][ T5297] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.758950][ T5302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.762911][ T5297] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 65.781012][ T5297] JBD2: no valid journal superblock found [ 65.786849][ T5297] EXT4-fs (loop3): Could not load journal inode [ 65.912166][ T5313] netlink: 20 bytes leftover after parsing attributes in process `syz.4.237'. [ 65.928227][ T5313] loop4: detected capacity change from 0 to 512 [ 65.962565][ T5313] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.237: Failed to acquire dquot type 1 [ 65.981818][ T5328] loop3: detected capacity change from 0 to 512 [ 65.988957][ T5313] EXT4-fs (loop4): 1 truncate cleaned up [ 65.997875][ T5328] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.022814][ T5313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.036729][ T5328] EXT4-fs (loop3): 1 truncate cleaned up [ 66.042790][ T5328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.056364][ T5313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.178065][ T5344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.242'. [ 66.207092][ T5344] netem: change failed [ 66.219293][ T5344] netlink: 'syz.2.242': attribute type 10 has an invalid length. [ 66.230681][ T5344] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 66.250418][ T5344] loop2: detected capacity change from 0 to 1024 [ 66.261993][ T5341] loop4: detected capacity change from 0 to 512 [ 66.270152][ T5341] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.278946][ T5341] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.311570][ T5344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.334915][ T5341] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.241: Allocating blocks 41-42 which overlap fs metadata [ 66.372291][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.382494][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.391981][ T5341] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.241: Failed to acquire dquot type 1 [ 66.403965][ T5341] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 66.460875][ T5341] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.241: corrupted inode contents [ 66.479027][ T5364] loop2: detected capacity change from 0 to 512 [ 66.484064][ T5341] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #12: comm syz.4.241: mark_inode_dirty error [ 66.507115][ T5341] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.241: corrupted inode contents [ 66.523804][ T5374] netlink: 'syz.0.245': attribute type 10 has an invalid length. [ 66.526349][ T5341] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.241: mark_inode_dirty error [ 66.532036][ T5364] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.244: iget: bad extra_isize 90 (inode size 256) [ 66.554689][ T5341] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.241: corrupted inode contents [ 66.556981][ T5364] EXT4-fs (loop2): Remounting filesystem read-only [ 66.575406][ T5341] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 66.584348][ T5357] lo speed is unknown, defaulting to 1000 [ 66.584508][ T5374] ipvlan0: entered allmulticast mode [ 66.591506][ T5364] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 66.595496][ T5374] veth0_vlan: entered allmulticast mode [ 66.604906][ T5364] EXT4-fs (loop2): 1 orphan inode deleted [ 66.618406][ T5341] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.241: corrupted inode contents [ 66.631175][ T5364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.634544][ T5374] team0: Device ipvlan0 failed to register rx_handler [ 66.643758][ T5341] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.241: mark_inode_dirty error [ 66.661358][ T5341] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 66.671005][ T5341] EXT4-fs (loop4): 1 truncate cleaned up [ 66.677623][ T5341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.694708][ T5341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.738038][ T5341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 66.764649][ T5400] netlink: 'syz.2.244': attribute type 1 has an invalid length. [ 66.797125][ T5400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.941780][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.007999][ T5446] netlink: 'syz.4.257': attribute type 6 has an invalid length. [ 67.022962][ T5442] netlink: 'syz.2.248': attribute type 1 has an invalid length. [ 67.037354][ T5442] bond2: entered promiscuous mode [ 67.074485][ T5442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.082755][ T5436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.095786][ T5436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.117592][ T5482] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.135843][ T5482] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 67.146473][ T5482] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 67.161975][ T5482] bond2: (slave wireguard0): making interface the new active one [ 67.169847][ T5482] wireguard0: entered promiscuous mode [ 67.192411][ T5442] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 67.193252][ T5482] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 67.199664][ T5442] IPv6: NLM_F_CREATE should be set when creating new route [ 67.199678][ T5442] IPv6: NLM_F_CREATE should be set when creating new route [ 67.209652][ T5442] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 67.234852][ T5442] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 67.247959][ T5442] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 67.397986][ T5515] loop3: detected capacity change from 0 to 1024 [ 67.407338][ T5515] EXT4-fs: Mount option(s) incompatible with ext2 [ 68.179642][ T5541] loop4: detected capacity change from 0 to 512 [ 68.191650][ T5540] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 68.210417][ T5534] loop2: detected capacity change from 0 to 512 [ 68.217885][ T5541] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.228681][ T5534] EXT4-fs: Ignoring removed oldalloc option [ 68.242251][ T5541] EXT4-fs (loop4): 1 truncate cleaned up [ 68.242883][ T5540] netlink: 'syz.0.265': attribute type 10 has an invalid length. [ 68.250463][ T5541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.255856][ T5540] netlink: 40 bytes leftover after parsing attributes in process `syz.0.265'. [ 68.277686][ T29] kauditd_printk_skb: 2317 callbacks suppressed [ 68.277746][ T29] audit: type=1326 audit(68.254:16728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5201776567 code=0x7ffc0000 [ 68.279818][ T5540] veth1_vlan: left promiscuous mode [ 68.284087][ T29] audit: type=1326 audit(68.254:16729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f520171b789 code=0x7ffc0000 [ 68.334753][ T29] audit: type=1326 audit(68.254:16730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 68.350431][ T5534] EXT4-fs: Mount option(s) incompatible with ext2 [ 68.357848][ T29] audit: type=1326 audit(68.284:16731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5201776567 code=0x7ffc0000 [ 68.386456][ T29] audit: type=1326 audit(68.284:16732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f520171b789 code=0x7ffc0000 [ 68.409158][ T29] audit: type=1326 audit(68.284:16733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5201776567 code=0x7ffc0000 [ 68.431840][ T29] audit: type=1326 audit(68.284:16734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f520171b789 code=0x7ffc0000 [ 68.454506][ T29] audit: type=1326 audit(68.284:16735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 68.460525][ T5540] batman_adv: batadv0: Adding interface: veth1_vlan [ 68.477084][ T29] audit: type=1326 audit(68.314:16736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5201776567 code=0x7ffc0000 [ 68.477120][ T29] audit: type=1326 audit(68.314:16737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f520171b789 code=0x7ffc0000 [ 68.529056][ T5540] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.569161][ T5551] netlink: 'syz.3.255': attribute type 10 has an invalid length. [ 68.603048][ T5540] batman_adv: batadv0: Interface activated: veth1_vlan [ 68.613641][ T5550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.255'. [ 68.622964][ T5550] netem: change failed [ 68.643056][ T5551] loop3: detected capacity change from 0 to 1024 [ 68.671532][ T5540] sch_fq: defrate 4294967295 ignored. [ 68.717518][ T5551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.739682][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.815184][ T5570] loop4: detected capacity change from 0 to 764 [ 68.830625][ T5573] bridge0: entered promiscuous mode [ 68.865096][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 69.690631][ T5577] lo speed is unknown, defaulting to 1000 [ 69.797347][ T5604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.813942][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.907318][ T5604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.932662][ T5570] rock: directory entry would overflow storage [ 69.938987][ T5570] rock: sig=0x4f50, size=4, remaining=3 [ 69.944600][ T5570] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 70.095676][ T5617] can0: slcan on ttyS3. [ 70.120855][ T5570] Symlink component flag not implemented [ 70.127193][ T5570] Symlink component flag not implemented (129) [ 70.134243][ T5570] rock: directory entry would overflow storage [ 70.140498][ T5570] rock: sig=0x4f50, size=4, remaining=3 [ 70.146089][ T5570] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 70.185282][ T5617] can0 (unregistered): slcan off ttyS3. [ 70.193609][ T5618] can0: slcan on ttyS3. [ 70.292010][ T5615] can0 (unregistered): slcan off ttyS3. [ 70.339404][ T5656] loop4: detected capacity change from 0 to 512 [ 70.362882][ T5642] lo speed is unknown, defaulting to 1000 [ 70.366701][ T5656] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.264: inode #0: comm syz.4.264: iget: illegal inode # [ 70.405830][ T5656] EXT4-fs (loop4): get orphan inode failed [ 70.428311][ T5656] EXT4-fs (loop4): mount failed [ 70.432956][ T5623] lo speed is unknown, defaulting to 1000 [ 70.554270][ T5715] bridge_slave_0: left allmulticast mode [ 70.560109][ T5715] bridge_slave_0: left promiscuous mode [ 70.565901][ T5715] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.580769][ T5715] bridge_slave_1: left allmulticast mode [ 70.586598][ T5715] bridge_slave_1: left promiscuous mode [ 70.592317][ T5715] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.592795][ T5716] netlink: 'syz.4.271': attribute type 10 has an invalid length. [ 70.607334][ T5716] netlink: 40 bytes leftover after parsing attributes in process `syz.4.271'. [ 70.621566][ T5715] team0: Port device team_slave_0 removed [ 70.632963][ T5715] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.649045][ T5683] lo speed is unknown, defaulting to 1000 [ 70.708661][ T5715] sch_fq: defrate 4294967295 ignored. [ 70.764840][ T5742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 70.801498][ T5749] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 70.813274][ T5749] 9pnet_fd: Insufficient options for proto=fd [ 70.853267][ T5745] loop4: detected capacity change from 0 to 512 [ 70.871707][ T5745] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.274: iget: bad extra_isize 90 (inode size 256) [ 70.900378][ T5745] EXT4-fs (loop4): Remounting filesystem read-only [ 70.915803][ T5745] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30) [ 70.930824][ T5745] EXT4-fs (loop4): 1 orphan inode deleted [ 70.944962][ T5745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.012993][ T5751] netlink: 'syz.4.274': attribute type 1 has an invalid length. [ 71.029029][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.197699][ T5799] netlink: 8 bytes leftover after parsing attributes in process `'(/^'. [ 71.339727][ T5801] lo speed is unknown, defaulting to 1000 [ 71.593985][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.847949][ T5867] lo speed is unknown, defaulting to 1000 [ 71.951948][ T5905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.961395][ T5905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.984729][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'. [ 72.014039][ T5908] team0: Port device team_slave_1 removed [ 72.147826][ T5920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.157369][ T5920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.176050][ T5920] can0: slcan on ttyS3. [ 72.224610][ T5920] can0 (unregistered): slcan off ttyS3. [ 72.582387][ T5936] loop4: detected capacity change from 0 to 2048 [ 72.606350][ T5936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 72.696162][ T5955] loop2: detected capacity change from 0 to 512 [ 72.711961][ T5955] netlink: 76 bytes leftover after parsing attributes in process `syz.2.288'. [ 72.735702][ T5950] vhci_hcd: invalid port number 255 [ 72.793805][ T5950] loop3: detected capacity change from 0 to 512 [ 72.813895][ T5950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.833995][ T5950] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.858741][ T5962] netlink: 14 bytes leftover after parsing attributes in process `syz.2.289'. [ 72.858893][ T5950] EXT4-fs (loop3): 1 truncate cleaned up [ 72.885057][ T5962] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 72.894735][ T5962] bond0 (unregistering): Released all slaves [ 72.897663][ T5950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.980857][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.050278][ T6020] loop3: detected capacity change from 0 to 128 [ 73.056744][ T6012] vhci_hcd: invalid port number 255 [ 73.095924][ T6020] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.098533][ T6012] loop2: detected capacity change from 0 to 512 [ 73.133644][ T6012] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.146703][ T6012] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.161055][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.291'. [ 73.206286][ T6012] EXT4-fs (loop2): 1 truncate cleaned up [ 73.212711][ T6012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.238333][ T3324] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.284870][ T29] kauditd_printk_skb: 1875 callbacks suppressed [ 73.284904][ T29] audit: type=1326 audit(73.254:18613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 73.314468][ T29] audit: type=1326 audit(73.264:18614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 73.337218][ T29] audit: type=1326 audit(73.294:18615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f11a6226567 code=0x7ffc0000 [ 73.359928][ T29] audit: type=1326 audit(73.294:18616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11a61cb789 code=0x7ffc0000 [ 73.382579][ T29] audit: type=1326 audit(73.294:18617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f11a622f6c9 code=0x7ffc0000 [ 73.405167][ T29] audit: type=1326 audit(73.294:18618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f11a6226567 code=0x7ffc0000 [ 73.427824][ T29] audit: type=1326 audit(73.294:18619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11a61cb789 code=0x7ffc0000 [ 73.450540][ T29] audit: type=1326 audit(73.294:18620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f11a622f6c9 code=0x7ffc0000 [ 73.474213][ T29] audit: type=1326 audit(73.364:18621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f11a6226567 code=0x7ffc0000 [ 73.496982][ T29] audit: type=1326 audit(73.364:18622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11a61cb789 code=0x7ffc0000 [ 73.525040][ T5936] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 73.572899][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.900946][ T6065] lo speed is unknown, defaulting to 1000 [ 74.077608][ T6059] netlink: 'syz.2.295': attribute type 5 has an invalid length. [ 74.113412][ T6063] pimreg: entered allmulticast mode [ 74.140008][ T6062] pimreg: left allmulticast mode [ 74.154286][ T5061] IPVS: starting estimator thread 0... [ 74.274524][ T6093] IPVS: using max 2640 ests per chain, 132000 per kthread [ 74.356522][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.297'. [ 74.365478][ T6102] netlink: 40 bytes leftover after parsing attributes in process `syz.3.297'. [ 74.386250][ T6102] loop3: detected capacity change from 0 to 2048 [ 74.483334][ T6102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.506060][ T6102] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.297: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 74.579574][ T6108] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 74.611455][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.638355][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'. [ 74.647357][ T6122] netlink: 40 bytes leftover after parsing attributes in process `syz.2.312'. [ 74.671716][ T6121] IPv6: Can't replace route, no match found [ 74.678113][ T6127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.697942][ T6122] loop2: detected capacity change from 0 to 2048 [ 74.701201][ T6127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.739574][ T6122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.763240][ T6127] can0: slcan on ttyS3. [ 74.763827][ T6122] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.312: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 74.785562][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 74.799746][ T6139] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 74.823668][ T6139] batman_adv: batadv0: Removing interface: veth1_vlan [ 74.835762][ T6127] can0 (unregistered): slcan off ttyS3. [ 74.906383][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.157771][ T6121] loop4: detected capacity change from 0 to 8192 [ 75.217703][ T6121] loop4: p1 p2 p3 p4[DM] [ 75.243730][ T6121] loop4: p1 size 835329 extends beyond EOD, truncated [ 75.261674][ T6121] loop4: p2 size 327680 extends beyond EOD, truncated [ 75.270149][ T6171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.279810][ T6121] loop4: p3 start 1052673 is beyond EOD, truncated [ 75.287625][ T6121] loop4: p4 size 262144 extends beyond EOD, truncated [ 75.295272][ T6171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.310114][ T6171] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 75.322113][ T6171] bond0 (unregistering): Released all slaves [ 76.083707][ T6250] loop3: detected capacity change from 0 to 512 [ 76.126445][ T6255] pimreg: entered allmulticast mode [ 76.203610][ T6255] pimreg: left allmulticast mode [ 76.417500][ T6280] loop4: detected capacity change from 0 to 512 [ 76.451922][ T6280] EXT4-fs: Ignoring removed oldalloc option [ 76.482022][ T6280] EXT4-fs: Mount option(s) incompatible with ext2 [ 76.539370][ T6278] __nla_validate_parse: 2 callbacks suppressed [ 76.539388][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 76.756629][ T6294] bridge0: entered promiscuous mode [ 77.080725][ T6308] loop2: detected capacity change from 0 to 1024 [ 77.155221][ T6308] EXT4-fs: Mount option(s) incompatible with ext2 [ 77.700193][ T6318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.320'. [ 77.748521][ T6318] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6318 comm=syz.4.320 [ 77.783017][ T6318] netlink: 32 bytes leftover after parsing attributes in process `syz.4.320'. [ 77.802048][ T6321] loop3: detected capacity change from 0 to 512 [ 77.809755][ T6321] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 77.818636][ T6321] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.871898][ T6321] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.319: Allocating blocks 41-42 which overlap fs metadata [ 77.898333][ T6321] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.319: Allocating blocks 41-42 which overlap fs metadata [ 77.914504][ T6321] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.319: Failed to acquire dquot type 1 [ 77.934687][ T6321] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 77.986257][ T6342] lo speed is unknown, defaulting to 1000 [ 78.034757][ T6321] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.319: corrupted inode contents [ 78.052627][ T6321] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.319: mark_inode_dirty error [ 78.077748][ T6321] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.319: corrupted inode contents [ 78.095646][ T6321] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.319: mark_inode_dirty error [ 78.111524][ T6321] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.319: corrupted inode contents [ 78.135804][ T6321] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 78.144788][ T6321] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.319: corrupted inode contents [ 78.156757][ T6321] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.319: mark_inode_dirty error [ 78.168008][ T6321] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 78.177280][ T6321] EXT4-fs (loop3): 1 truncate cleaned up [ 78.183341][ T6321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.204105][ T6321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.234222][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 78.295853][ T29] kauditd_printk_skb: 1389 callbacks suppressed [ 78.295886][ T29] audit: type=1326 audit(78.274:20009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e9e31f6c9 code=0x7ffc0000 [ 78.324974][ T29] audit: type=1326 audit(78.274:20010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9e31f6c9 code=0x7ffc0000 [ 78.347772][ T29] audit: type=1326 audit(78.274:20011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9e31f6c9 code=0x7ffc0000 [ 78.353144][ T6397] netlink: 14 bytes leftover after parsing attributes in process `syz.3.323'. [ 78.370682][ T29] audit: type=1326 audit(78.274:20012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6385 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9e9e31f6c9 code=0x7ffc0000 [ 78.402514][ T29] audit: type=1326 audit(78.264:20008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6382 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999fddf6c9 code=0x7ffc0000 [ 78.425279][ T29] audit: type=1326 audit(78.294:20013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6382 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f999fd7b789 code=0x7ffc0000 [ 78.447982][ T29] audit: type=1326 audit(78.294:20014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6382 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f999fddf6c9 code=0x7ffc0000 [ 78.470672][ T29] audit: type=1326 audit(78.294:20015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6382 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999fddf6c9 code=0x7ffc0000 [ 78.493509][ T29] audit: type=1326 audit(78.294:20016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6382 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999fddf6c9 code=0x7ffc0000 [ 78.516397][ T29] audit: type=1326 audit(78.294:20017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6382 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f999fddf6c9 code=0x7ffc0000 [ 78.630256][ T6388] lo speed is unknown, defaulting to 1000 [ 78.839884][ T6414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.849401][ T6414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.935202][ T6441] pimreg: entered allmulticast mode [ 78.943918][ T6441] pimreg: left allmulticast mode [ 79.572341][ T6461] tipc: Started in network mode [ 79.577373][ T6461] tipc: Node identity 6e98c5973b92, cluster identity 4711 [ 79.584578][ T6461] tipc: Enabled bearer , priority 0 [ 79.667562][ T6461] syzkaller0: entered promiscuous mode [ 79.673105][ T6461] syzkaller0: entered allmulticast mode [ 79.746415][ T6461] tipc: Resetting bearer [ 79.771299][ T6466] lo speed is unknown, defaulting to 1000 [ 79.826725][ T6460] tipc: Resetting bearer [ 79.833515][ T6460] tipc: Disabling bearer [ 79.875419][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 79.908146][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.339'. [ 80.046774][ T6503] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6503 comm=syz.3.340 [ 80.086429][ T6512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.341'. [ 80.569751][ T6541] lo speed is unknown, defaulting to 1000 [ 80.750745][ T6532] netlink: 96 bytes leftover after parsing attributes in process `syz.1.344'. [ 81.223259][ T6575] loop2: detected capacity change from 0 to 512 [ 81.236131][ T6575] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.244933][ T6575] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.296967][ T6575] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.347: Allocating blocks 41-42 which overlap fs metadata [ 81.318829][ T6575] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.347: Failed to acquire dquot type 1 [ 81.330658][ T6575] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 81.345572][ T6575] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.347: corrupted inode contents [ 81.361714][ T6575] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.347: mark_inode_dirty error [ 81.384891][ T6575] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.347: corrupted inode contents [ 81.407168][ T6575] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.347: mark_inode_dirty error [ 81.423661][ T6575] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.347: corrupted inode contents [ 81.436094][ T6575] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 81.445003][ T6575] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.347: corrupted inode contents [ 81.457362][ T6575] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.347: mark_inode_dirty error [ 81.470082][ T6575] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 81.483894][ T6575] EXT4-fs (loop2): 1 truncate cleaned up [ 81.490262][ T6575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.519846][ T6575] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.531381][ T6597] futex_wake_op: syz.1.351 tries to shift op by -1; fix this program [ 81.571627][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 81.741985][ T6608] netlink: 'syz.2.352': attribute type 3 has an invalid length. [ 81.749926][ T6608] netlink: 'syz.2.352': attribute type 3 has an invalid length. [ 81.757625][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'. [ 81.846193][ T6608] lo speed is unknown, defaulting to 1000 [ 82.022587][ T6608] usb usb1: check_ctrlrecip: process 6608 (syz.2.352) requesting ep 01 but needs 81 [ 82.032121][ T6608] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 82.249883][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.353'. [ 82.258795][ T6633] netlink: 40 bytes leftover after parsing attributes in process `syz.4.353'. [ 82.299761][ T6635] loop3: detected capacity change from 0 to 512 [ 82.396244][ T6635] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 82.442601][ T6635] System zones: 1-3, 19-19, 35-38 [ 82.671400][ T6639] loop4: detected capacity change from 0 to 2048 [ 82.696808][ T6635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.770081][ T6639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.865197][ T6633] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #2: comm syz.4.353: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 82.886445][ T6635] can0: slcan on ttyS3. [ 83.161855][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.173050][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.220333][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 83.272286][ T6667] netlink: 32 bytes leftover after parsing attributes in process `syz.1.365'. [ 83.290580][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.357'. [ 83.305954][ T29] kauditd_printk_skb: 1252 callbacks suppressed [ 83.305969][ T29] audit: type=1326 audit(83.282:21267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 83.335028][ T29] audit: type=1326 audit(83.282:21268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 83.357899][ T29] audit: type=1326 audit(83.282:21269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 83.371905][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 83.414549][ T6688] loop4: detected capacity change from 0 to 1024 [ 83.453312][ T6688] EXT4-fs: Mount option(s) incompatible with ext2 [ 83.504888][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.509094][ T29] audit: type=1326 audit(83.312:21270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 83.534847][ T29] audit: type=1326 audit(83.312:21271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 83.557726][ T29] audit: type=1326 audit(83.312:21272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 83.580569][ T29] audit: type=1326 audit(83.312:21273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 83.603387][ T29] audit: type=1326 audit(83.312:21274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 83.626131][ T29] audit: type=1326 audit(83.312:21275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 83.648910][ T29] audit: type=1326 audit(83.312:21276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f520177f6c9 code=0x7ffc0000 [ 83.673444][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.693594][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 83.708972][ T6700] netlink: 312 bytes leftover after parsing attributes in process `syz.1.358'. [ 84.215391][ T6580] can0 (unregistered): slcan off ttyS3. [ 84.374754][ T6750] loop3: detected capacity change from 0 to 2048 [ 84.415861][ T3492] Alternate GPT is invalid, using primary GPT. [ 84.422256][ T3492] loop3: p1 p2 p3 [ 84.441093][ T6750] Alternate GPT is invalid, using primary GPT. [ 84.447582][ T6750] loop3: p1 p2 p3 [ 84.723672][ T6806] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 84.758102][ T6806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.773684][ T6806] bond0 (unregistering): Released all slaves [ 84.920800][ T6875] lo speed is unknown, defaulting to 1000 [ 85.048003][ T6906] loop4: detected capacity change from 0 to 1024 [ 85.056989][ T6906] EXT4-fs: Ignoring removed orlov option [ 85.089565][ T6906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.199563][ T6910] lo speed is unknown, defaulting to 1000 [ 85.817408][ T6939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.880503][ T6966] vlan0: entered allmulticast mode [ 85.885755][ T6966] bond1: entered allmulticast mode [ 86.088765][ T6990] loop3: detected capacity change from 0 to 2048 [ 86.135762][ T6990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.517859][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.808526][ T7013] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.677079][ T7039] lo speed is unknown, defaulting to 1000 [ 88.068911][ T7064] __nla_validate_parse: 11 callbacks suppressed [ 88.068925][ T7064] netlink: 664 bytes leftover after parsing attributes in process `syz.1.388'. [ 88.463980][ T29] kauditd_printk_skb: 1090 callbacks suppressed [ 88.463998][ T29] audit: type=1326 audit(88.432:22367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f089a6567 code=0x7ffc0000 [ 88.585056][ T7071] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.599334][ T29] audit: type=1326 audit(88.472:22368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f0894b789 code=0x7ffc0000 [ 88.622274][ T29] audit: type=1326 audit(88.472:22369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f089a6567 code=0x7ffc0000 [ 88.645252][ T29] audit: type=1326 audit(88.472:22370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f0894b789 code=0x7ffc0000 [ 88.667985][ T29] audit: type=1326 audit(88.472:22371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 88.681560][ T7068] loop4: detected capacity change from 0 to 8192 [ 88.690860][ T29] audit: type=1326 audit(88.492:22372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f089a6567 code=0x7ffc0000 [ 88.720493][ T29] audit: type=1326 audit(88.492:22373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f0894b789 code=0x7ffc0000 [ 88.743652][ T29] audit: type=1326 audit(88.492:22374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 88.766318][ T29] audit: type=1326 audit(88.502:22375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f089a6567 code=0x7ffc0000 [ 88.789205][ T29] audit: type=1326 audit(88.502:22376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f0894b789 code=0x7ffc0000 [ 88.844861][ T3492] loop4: p2 p3 p4 [ 88.848977][ T3492] loop4: p2 start 2936012800 is beyond EOD, truncated [ 88.855911][ T3492] loop4: p3 start 1912602624 is beyond EOD, truncated [ 88.860614][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 88.862973][ T3492] loop4: p4 size 656640 extends beyond EOD, truncated [ 88.871729][ T7091] netlink: 312 bytes leftover after parsing attributes in process `syz.2.392'. [ 88.881299][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.389'. [ 88.887405][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 88.992713][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.029372][ T7097] hub 6-0:1.0: USB hub found [ 89.036286][ T7097] hub 6-0:1.0: 8 ports detected [ 89.045739][ T7068] loop4: p2 p3 p4 [ 89.049941][ T7068] loop4: p2 start 2936012800 is beyond EOD, truncated [ 89.056814][ T7068] loop4: p3 start 1912602624 is beyond EOD, truncated [ 89.063616][ T7068] loop4: p4 size 656640 extends beyond EOD, truncated [ 89.135311][ T7079] lo speed is unknown, defaulting to 1000 [ 89.152319][ T7099] capability: warning: `syz.1.393' uses 32-bit capabilities (legacy support in use) [ 89.185256][ T3492] udevd[3492]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 89.192658][ T7137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.397'. [ 89.206786][ T7137] loop9: detected capacity change from 0 to 7 [ 89.206814][ T3492] udevd[3492]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 89.213736][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 89.231628][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 89.240055][ T3305] loop9: unable to read partition table [ 89.246419][ T7137] Buffer I/O error on dev loop9, logical block 0, async page read [ 89.254278][ T7137] Buffer I/O error on dev loop9, logical block 0, async page read [ 89.262168][ T7137] loop9: unable to read partition table [ 89.274158][ T7137] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 89.274158][ T7137] ) failed (rc=-5) [ 89.292569][ T7146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.398'. [ 89.301853][ T7146] IPVS: Unknown mcast interface: ipvlan1 [ 89.308199][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 89.312231][ T7147] netlink: 'syz.4.397': attribute type 33 has an invalid length. [ 89.317401][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 89.324423][ T7147] netlink: 152 bytes leftover after parsing attributes in process `syz.4.397'. [ 89.332352][ T7146] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43 sclass=netlink_tcpdiag_socket pid=7146 comm=syz.3.398 [ 89.352955][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 89.370048][ T7137] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.382696][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 89.391857][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 89.402452][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 89.543749][ T7161] syzkaller0: entered promiscuous mode [ 89.549284][ T7161] syzkaller0: entered allmulticast mode [ 89.563561][ T7173] loop4: detected capacity change from 0 to 1024 [ 89.586809][ T7173] EXT4-fs: Mount option(s) incompatible with ext2 [ 89.627125][ T7159] lo speed is unknown, defaulting to 1000 [ 89.883487][ T7187] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 90.145560][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 90.185317][ T7239] hub 6-0:1.0: USB hub found [ 90.200178][ T7239] hub 6-0:1.0: 8 ports detected [ 90.299729][ T7264] futex_wake_op: syz.2.410 tries to shift op by -1; fix this program [ 90.365375][ T7259] lo speed is unknown, defaulting to 1000 [ 90.605178][ T7275] lo speed is unknown, defaulting to 1000 [ 91.000957][ T7322] xt_policy: output policy not valid in PREROUTING and INPUT [ 91.512381][ T7346] lo speed is unknown, defaulting to 1000 [ 93.101829][ T7403] __nla_validate_parse: 2 callbacks suppressed [ 93.101845][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 93.115224][ T7394] lo speed is unknown, defaulting to 1000 [ 93.134430][ T7403] netlink: 312 bytes leftover after parsing attributes in process `syz.3.422'. [ 93.143523][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 93.171057][ T7407] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7407 comm=syz.0.424 [ 93.265245][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 93.363693][ T7443] loop3: detected capacity change from 0 to 512 [ 93.363894][ T7435] lo speed is unknown, defaulting to 1000 [ 93.387173][ T7397] loop9: detected capacity change from 0 to 7 [ 93.394755][ T7397] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.405566][ T7443] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.426: inode #0: comm syz.3.426: iget: illegal inode # [ 93.418546][ T7397] loop9: unable to read partition table [ 93.459406][ T7397] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 93.459406][ T7397] ) failed (rc=-5) [ 93.476678][ T7443] EXT4-fs (loop3): get orphan inode failed [ 93.499128][ T7443] EXT4-fs (loop3): mount failed [ 93.599889][ T7475] IPv6: Can't replace route, no match found [ 93.634549][ T7478] lo speed is unknown, defaulting to 1000 [ 93.889890][ T7503] lo speed is unknown, defaulting to 1000 [ 93.965829][ T7530] loop0: detected capacity change from 0 to 128 [ 94.016856][ T29] kauditd_printk_skb: 1630 callbacks suppressed [ 94.016873][ T29] audit: type=1326 audit(93.987:24007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7542 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 94.055352][ T7530] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.089917][ T29] audit: type=1326 audit(94.017:24008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7542 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 94.112777][ T29] audit: type=1326 audit(94.017:24009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7542 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 94.135592][ T29] audit: type=1326 audit(94.017:24010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7542 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 94.158396][ T29] audit: type=1326 audit(94.017:24011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7542 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 94.181188][ T29] audit: type=1326 audit(94.017:24012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7542 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 94.204024][ T29] audit: type=1326 audit(94.017:24013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7542 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 94.226821][ T29] audit: type=1326 audit(94.017:24014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7542 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 94.249651][ T29] audit: type=1326 audit(94.027:24015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7542 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 94.258137][ T7532] loop4: detected capacity change from 0 to 164 [ 94.272429][ T29] audit: type=1326 audit(94.027:24016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7542 comm="syz.2.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 94.441169][ T7530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.431'. [ 94.450199][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 94.500686][ T7532] syz.4.430: attempt to access beyond end of device [ 94.500686][ T7532] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 94.526166][ T7532] syz.4.430: attempt to access beyond end of device [ 94.526166][ T7532] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 94.754673][ T5061] IPVS: starting estimator thread 0... [ 94.785585][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'. [ 94.884472][ T7588] IPVS: using max 2640 ests per chain, 132000 per kthread [ 95.333758][ T7592] loop4: detected capacity change from 0 to 2048 [ 95.359638][ T7591] tipc: Started in network mode [ 95.364661][ T7591] tipc: Node identity 2aa73a61080e, cluster identity 4711 [ 95.371858][ T7591] tipc: Enabled bearer , priority 0 [ 95.465538][ T3492] Alternate GPT is invalid, using primary GPT. [ 95.471930][ T3492] loop4: p1 p2 p3 [ 95.475698][ T3492] loop4: partition table partially beyond EOD, truncated [ 95.624580][ T7590] lo speed is unknown, defaulting to 1000 [ 95.635067][ T7564] tipc: Disabling bearer [ 95.700815][ T7592] Alternate GPT is invalid, using primary GPT. [ 95.707317][ T7592] loop4: p1 p2 p3 [ 95.711082][ T7592] loop4: partition table partially beyond EOD, truncated [ 95.766975][ T7611] syzkaller0: entered promiscuous mode [ 95.772475][ T7611] syzkaller0: entered allmulticast mode [ 95.804510][ T7620] syzkaller0: entered promiscuous mode [ 95.810046][ T7620] syzkaller0: entered allmulticast mode [ 95.820324][ T3004] Alternate GPT is invalid, using primary GPT. [ 95.826657][ T3004] loop4: p1 p2 p3 [ 95.830392][ T3004] loop4: partition table partially beyond EOD, truncated [ 95.898243][ T7604] syzkaller0: tun_net_xmit 1280 [ 96.309811][ T7660] lo speed is unknown, defaulting to 1000 [ 96.611697][ T7720] loop0: detected capacity change from 0 to 512 [ 96.629563][ T7710] lo speed is unknown, defaulting to 1000 [ 96.713790][ T7720] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.444: inode #0: comm syz.0.444: iget: illegal inode # [ 96.876472][ T7720] EXT4-fs (loop0): get orphan inode failed [ 96.882622][ T7720] EXT4-fs (loop0): mount failed [ 97.078367][ T7753] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 97.192583][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.458'. [ 97.203257][ T7761] loop9: detected capacity change from 0 to 7 [ 97.210377][ T3492] buffer_io_error: 6 callbacks suppressed [ 97.210438][ T3492] Buffer I/O error on dev loop9, logical block 0, async page read [ 97.224791][ T3492] Buffer I/O error on dev loop9, logical block 0, async page read [ 97.232645][ T3492] loop9: unable to read partition table [ 97.244603][ T7761] Buffer I/O error on dev loop9, logical block 0, async page read [ 97.251604][ T7765] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7765 comm=syz.2.457 [ 97.266061][ T7761] Buffer I/O error on dev loop9, logical block 0, async page read [ 97.273948][ T7761] loop9: unable to read partition table [ 97.287847][ T7768] loop4: detected capacity change from 0 to 128 [ 97.296394][ T7768] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.298001][ T7769] netlink: 'syz.0.458': attribute type 33 has an invalid length. [ 97.308619][ T7761] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 97.308619][ T7761] ) failed (rc=-5) [ 97.315952][ T7769] netlink: 152 bytes leftover after parsing attributes in process `syz.0.458'. [ 97.316500][ T3492] Buffer I/O error on dev loop9, logical block 0, async page read [ 97.354558][ T3492] Buffer I/O error on dev loop9, logical block 0, async page read [ 97.359695][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 97.362950][ T3492] Buffer I/O error on dev loop9, logical block 0, async page read [ 97.383186][ T3492] Buffer I/O error on dev loop9, logical block 0, async page read [ 97.414605][ T3492] Buffer I/O error on dev loop9, logical block 0, async page read [ 97.440514][ T7782] loop3: detected capacity change from 0 to 1024 [ 97.450067][ T7782] EXT4-fs: Ignoring removed orlov option [ 97.469143][ T7782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.767445][ T7799] lo speed is unknown, defaulting to 1000 [ 98.742007][ T7827] lo speed is unknown, defaulting to 1000 [ 98.820273][ T7846] __nla_validate_parse: 2 callbacks suppressed [ 98.820286][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.455'. [ 98.836608][ T7846] IPVS: Unknown mcast interface: ipvlan1 [ 98.843590][ T7846] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43 sclass=netlink_tcpdiag_socket pid=7846 comm=syz.4.455 [ 98.857875][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.916411][ T7877] loop1: detected capacity change from 0 to 1024 [ 98.927810][ T7877] EXT4-fs: Mount option(s) incompatible with ext2 [ 99.025704][ T29] kauditd_printk_skb: 540 callbacks suppressed [ 99.025722][ T29] audit: type=1326 audit(98.997:24557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7841 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f999fe11f85 code=0x7ffc0000 [ 99.054888][ T29] audit: type=1326 audit(98.997:24558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7841 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f999fe11f85 code=0x7ffc0000 [ 99.077690][ T29] audit: type=1326 audit(98.997:24559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7841 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f999fe11f85 code=0x7ffc0000 [ 99.100514][ T29] audit: type=1326 audit(98.997:24560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7841 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f999fe11f85 code=0x7ffc0000 [ 99.123279][ T29] audit: type=1326 audit(98.997:24561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7841 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f999fe11f85 code=0x7ffc0000 [ 99.146052][ T29] audit: type=1326 audit(98.997:24562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7841 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f999fe11f85 code=0x7ffc0000 [ 99.168763][ T29] audit: type=1326 audit(98.997:24563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7841 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f999fe11f85 code=0x7ffc0000 [ 99.191494][ T29] audit: type=1326 audit(98.997:24564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7841 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f999fe11f85 code=0x7ffc0000 [ 99.214202][ T29] audit: type=1326 audit(98.997:24565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7841 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f999fe11f85 code=0x7ffc0000 [ 99.236936][ T29] audit: type=1326 audit(98.997:24566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7841 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f999fe11f85 code=0x7ffc0000 [ 99.551059][ T7891] loop1: detected capacity change from 0 to 128 [ 99.570411][ T7891] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.591019][ T7891] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.629244][ T7891] netlink: 'syz.1.470': attribute type 1 has an invalid length. [ 99.671331][ T7891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.694457][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 99.712902][ T7891] bond0 (unregistering): Released all slaves [ 99.843505][ T31] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.966425][ T7984] lo speed is unknown, defaulting to 1000 [ 100.472478][ T8018] loop4: detected capacity change from 0 to 512 [ 100.669509][ T8018] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.466: inode #0: comm syz.4.466: iget: illegal inode # [ 100.977579][ T8026] loop3: detected capacity change from 0 to 4096 [ 101.024802][ T8026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.038628][ T8001] lo speed is unknown, defaulting to 1000 [ 101.079331][ T8018] EXT4-fs (loop4): get orphan inode failed [ 101.086131][ T8037] loop0: detected capacity change from 0 to 4096 [ 101.105976][ T8018] EXT4-fs (loop4): mount failed [ 101.129448][ T8037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.225149][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.327001][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.604424][ T8081] loop3: detected capacity change from 0 to 2048 [ 101.765530][ T3492] Alternate GPT is invalid, using primary GPT. [ 101.772017][ T3492] loop3: p1 p2 p3 [ 101.775781][ T3492] loop3: partition table partially beyond EOD, truncated [ 101.845475][ T8078] lo speed is unknown, defaulting to 1000 [ 101.895888][ T8081] Alternate GPT is invalid, using primary GPT. [ 101.902363][ T8081] loop3: p1 p2 p3 [ 101.906227][ T8081] loop3: partition table partially beyond EOD, truncated [ 102.021284][ T3004] Alternate GPT is invalid, using primary GPT. [ 102.027640][ T3004] loop3: p1 p2 p3 [ 102.031380][ T3004] loop3: partition table partially beyond EOD, truncated [ 102.191871][ T8134] loop4: detected capacity change from 0 to 512 [ 102.636624][ T8143] loop0: detected capacity change from 0 to 1024 [ 102.674504][ T8134] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.475: inode has both inline data and extents flags [ 102.688032][ T8134] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.475: couldn't read orphan inode 15 (err -117) [ 102.700908][ T8134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.897358][ T8155] usb usb1: check_ctrlrecip: process 8155 (syz.2.476) requesting ep 01 but needs 81 [ 102.906879][ T8155] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 103.058616][ T8143] EXT4-fs: Mount option(s) incompatible with ext2 [ 103.144032][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.256663][ T8127] syzkaller0: entered promiscuous mode [ 103.263125][ T8127] syzkaller0: entered allmulticast mode [ 103.295519][ T8142] netlink: 'syz.2.476': attribute type 3 has an invalid length. [ 103.303365][ T8142] netlink: 'syz.2.476': attribute type 3 has an invalid length. [ 103.311095][ T8142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'. [ 103.333400][ T12] syzkaller0: tun_net_xmit 48 [ 103.348545][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 103.348880][ T3492] udevd[3492]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 103.366259][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 103.420566][ T8145] lo speed is unknown, defaulting to 1000 [ 103.433002][ T8167] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8167 comm=syz.4.477 [ 103.513247][ T8227] syzkaller0: entered allmulticast mode [ 103.531533][ T8227] syzkaller0: entered promiscuous mode [ 103.538987][ T8227] syzkaller0 (unregistering): left allmulticast mode [ 103.545958][ T8227] syzkaller0 (unregistering): left promiscuous mode [ 103.599555][ T8237] loop2: detected capacity change from 0 to 512 [ 103.619473][ T8237] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 103.830404][ T8256] siw: device registration error -23 [ 103.847614][ T8259] loop1: detected capacity change from 0 to 512 [ 103.855841][ T8259] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.863271][ T8259] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.028651][ T8263] lo speed is unknown, defaulting to 1000 [ 104.074314][ T29] kauditd_printk_skb: 1086 callbacks suppressed [ 104.074333][ T29] audit: type=1326 audit(103.935:25653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8249 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999fddf6c9 code=0x7ffc0000 [ 104.103472][ T29] audit: type=1326 audit(103.935:25654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8249 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999fddf6c9 code=0x7ffc0000 [ 104.126351][ T29] audit: type=1326 audit(103.935:25655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8249 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999fddf6c9 code=0x7ffc0000 [ 104.149150][ T29] audit: type=1326 audit(103.935:25656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8249 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999fddf6c9 code=0x7ffc0000 [ 104.171936][ T29] audit: type=1326 audit(103.935:25657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8249 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999fddf6c9 code=0x7ffc0000 [ 104.194771][ T29] audit: type=1326 audit(103.935:25658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8249 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999fddf6c9 code=0x7ffc0000 [ 104.217725][ T29] audit: type=1326 audit(103.935:25659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8249 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f999fddf703 code=0x7ffc0000 [ 104.240358][ T29] audit: type=1326 audit(103.935:25660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8249 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f999fddf703 code=0x7ffc0000 [ 104.263139][ T29] audit: type=1326 audit(103.935:25661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8249 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999fddf6c9 code=0x7ffc0000 [ 104.286011][ T29] audit: type=1326 audit(103.935:25662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8249 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f999fddf703 code=0x7ffc0000 [ 104.406209][ T8259] EXT4-fs (loop1): 1 truncate cleaned up [ 104.449716][ T8259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.487746][ T8256] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 104.585264][ T8291] netlink: 'syz.0.485': attribute type 1 has an invalid length. [ 104.593031][ T8291] netlink: 224 bytes leftover after parsing attributes in process `syz.0.485'. [ 104.720098][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.793476][ T8314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.489'. [ 104.831607][ T8314] loop0: detected capacity change from 0 to 1024 [ 104.882305][ T8314] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 104.892561][ T8316] loop2: detected capacity change from 0 to 1024 [ 104.902481][ T8316] EXT4-fs: Mount option(s) incompatible with ext2 [ 105.006124][ T8333] netlink: 'syz.0.489': attribute type 10 has an invalid length. [ 105.018561][ T8333] netlink: 'syz.0.489': attribute type 10 has an invalid length. [ 105.089028][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 105.128186][ T8294] loop9: detected capacity change from 0 to 7 [ 105.134540][ T8294] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.142656][ T8294] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.150518][ T8294] loop9: unable to read partition table [ 105.156279][ T8294] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 105.156279][ T8294] ) failed (rc=-5) [ 105.235201][ T8343] xt_policy: output policy not valid in PREROUTING and INPUT [ 105.318974][ T8347] loop4: detected capacity change from 0 to 4096 [ 105.337303][ T8347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.386364][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.387683][ T8354] netlink: 'syz.3.496': attribute type 13 has an invalid length. [ 105.431634][ T8360] loop4: detected capacity change from 0 to 256 [ 105.514232][ T8395] 9pnet: Could not find request transport: fd, priority 10 [ 116.748208][ T9072] netlink: 5 bytes leftover after parsing attributes in process `syz.2.572'. [ 116.754613][ T9070] loop4: detected capacity change from 0 to 4096 [ 116.763568][ T9068] loop1: detected capacity change from 0 to 256 [ 116.778953][ T9072] 0{X: renamed from gretap0 (while UP) [ 116.786429][ T9070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.802176][ T9072] 0{X: entered allmulticast mode [ 116.808369][ T9076] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9076 comm=syz.2.572 [ 116.820781][ T9076] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9076 comm=syz.2.572 [ 116.840764][ T9068] FAT-fs (loop1): Directory bread(block 64) failed [ 116.849991][ T9068] FAT-fs (loop1): Directory bread(block 65) failed [ 116.857216][ T9068] FAT-fs (loop1): Directory bread(block 66) failed [ 116.864200][ T9072] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 116.881365][ T9068] FAT-fs (loop1): Directory bread(block 67) failed [ 116.904063][ T9068] FAT-fs (loop1): Directory bread(block 68) failed [ 116.911982][ T9068] FAT-fs (loop1): Directory bread(block 69) failed [ 116.922515][ T9081] loop2: detected capacity change from 0 to 512 [ 116.928085][ T9068] FAT-fs (loop1): Directory bread(block 70) failed [ 116.935629][ T9068] FAT-fs (loop1): Directory bread(block 71) failed [ 116.942171][ T9068] FAT-fs (loop1): Directory bread(block 72) failed [ 116.954402][ T9068] FAT-fs (loop1): Directory bread(block 73) failed [ 116.961560][ T9081] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 116.980646][ T9068] syz.1.570: attempt to access beyond end of device [ 116.980646][ T9068] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 116.994717][ T9068] syz.1.570: attempt to access beyond end of device [ 116.994717][ T9068] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 116.996459][ T9081] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.572: bg 0: block 104: invalid block bitmap [ 117.064577][ T9081] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 117.081149][ T9095] loop3: detected capacity change from 0 to 256 [ 117.087963][ T9095] vfat: Unknown parameter ' ' [ 117.094607][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.573'. [ 117.113529][ T9081] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.572: invalid indirect mapped block 1 (level 1) [ 117.160639][ T9100] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.174892][ T9081] EXT4-fs (loop2): 1 truncate cleaned up [ 117.182279][ T9081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.251419][ T9100] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.368463][ T9100] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.423587][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.477627][ T9100] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.613757][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.837344][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 117.970890][ T5066] tipc: Node number set to 581515873 [ 118.019019][ T9137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'. [ 118.087628][ T9135] 9pnet_fd: Insufficient options for proto=fd [ 118.147762][ T9142] loop2: detected capacity change from 0 to 512 [ 118.283042][ T9142] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.577: error while reading EA inode 32 err=-116 [ 118.397399][ T9142] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.577: error while reading EA inode 32 err=-116 [ 118.452101][ T9142] EXT4-fs (loop2): 1 orphan inode deleted [ 118.483003][ T9142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.829484][ T9168] loop3: detected capacity change from 0 to 512 [ 118.855587][ T9168] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.584: inode #0: comm syz.3.584: iget: illegal inode # [ 118.886463][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.894570][ T9168] EXT4-fs (loop3): get orphan inode failed [ 118.900584][ T9168] EXT4-fs (loop3): mount failed [ 118.918315][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.929306][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.946743][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.974438][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.006789][ T9162] lo speed is unknown, defaulting to 1000 [ 119.023037][ T9186] loop2: detected capacity change from 0 to 2048 [ 119.046524][ T9186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.071208][ T9186] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.081147][ T9186] ================================================================== [ 119.089256][ T9186] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 119.096818][ T9186] [ 119.099201][ T9186] read-write to 0xffff888237d25ee8 of 1 bytes by task 9141 on cpu 1: [ 119.107281][ T9186] folio_add_lru+0xa5/0x1f0 [ 119.111799][ T9186] shmem_get_folio_gfp+0x7ab/0xd60 [ 119.116970][ T9186] shmem_write_begin+0xa8/0x190 [ 119.121838][ T9186] generic_perform_write+0x184/0x490 [ 119.127157][ T9186] shmem_file_write_iter+0xc5/0xf0 [ 119.132297][ T9186] __kernel_write_iter+0x2d6/0x540 [ 119.137430][ T9186] dump_user_range+0x61e/0x8f0 [ 119.142237][ T9186] elf_core_dump+0x1de7/0x1f80 [ 119.147056][ T9186] coredump_write+0xb12/0xe30 [ 119.151753][ T9186] vfs_coredump+0x143a/0x20d0 [ 119.156449][ T9186] get_signal+0xd84/0xf70 [ 119.160885][ T9186] arch_do_signal_or_restart+0x96/0x440 [ 119.166441][ T9186] irqentry_exit_to_user_mode+0x5b/0xa0 [ 119.172021][ T9186] irqentry_exit+0x12/0x50 [ 119.176468][ T9186] exc_general_protection+0x15b/0x1f0 [ 119.181854][ T9186] asm_exc_general_protection+0x26/0x30 [ 119.187410][ T9186] [ 119.189754][ T9186] read to 0xffff888237d25ee8 of 1 bytes by task 9186 on cpu 0: [ 119.197303][ T9186] __lru_add_drain_all+0x17e/0x450 [ 119.202423][ T9186] lru_add_drain_all+0x10/0x20 [ 119.207197][ T9186] invalidate_bdev+0x47/0x70 [ 119.211797][ T9186] ext4_put_super+0x624/0x7d0 [ 119.216490][ T9186] generic_shutdown_super+0xe6/0x210 [ 119.221797][ T9186] kill_block_super+0x2a/0x70 [ 119.226487][ T9186] ext4_kill_sb+0x42/0x80 [ 119.231090][ T9186] deactivate_locked_super+0x75/0x1c0 [ 119.236484][ T9186] deactivate_super+0x97/0xa0 [ 119.241258][ T9186] cleanup_mnt+0x269/0x2e0 [ 119.245704][ T9186] __cleanup_mnt+0x19/0x20 [ 119.250135][ T9186] task_work_run+0x131/0x1a0 [ 119.254741][ T9186] exit_to_user_mode_loop+0xed/0x110 [ 119.260048][ T9186] do_syscall_64+0x1d6/0x200 [ 119.264676][ T9186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.270760][ T9186] [ 119.273086][ T9186] value changed: 0x12 -> 0x14 [ 119.277771][ T9186] [ 119.280095][ T9186] Reported by Kernel Concurrency Sanitizer on: [ 119.286253][ T9186] CPU: 0 UID: 0 PID: 9186 Comm: syz.2.585 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 119.297463][ T9186] Tainted: [W]=WARN [ 119.301268][ T9186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.311329][ T9186] ================================================================== [ 119.330570][ T9184] loop1: detected capacity change from 0 to 4096 [ 119.365585][ T9184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.422947][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.516889][ T29] kauditd_printk_skb: 1660 callbacks suppressed [ 119.516909][ T29] audit: type=1326 audit(119.497:40428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 119.549465][ T29] audit: type=1326 audit(119.497:40429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 119.572599][ T29] audit: type=1326 audit(119.497:40430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 119.595358][ T29] audit: type=1326 audit(119.497:40431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 119.618205][ T29] audit: type=1326 audit(119.527:40432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 119.641321][ T29] audit: type=1326 audit(119.527:40433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 119.664302][ T29] audit: type=1326 audit(119.527:40434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000 [ 119.687219][ T29] audit: type=1326 audit(119.527:40435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f089af6c9 code=0x7ffc0000