last executing test programs: 1m2.882071213s ago: executing program 1 (id=18): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000002240), 0x0, 0x240000c0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x2a020480) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, 0x0, 0xc0041) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000002060500feff000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000740)=ANY=[@ANYBLOB='unhide,map=normal,map=off,check=strict,hide,hide,session=0x0000000000000052,unhide,cruft,sbsector=0x0000000000000001,session=0x0000000000000049,map=off,mode=0x0000000000000083,uid=', @ANYRESDEC=0x0, @ANYBLOB="2ce8ffa4c246ed00000000000000000f841a5f127d6a4ddb452312a0d7ffe1037147b2a47422194881c19fe6b48f4572dc7ba9f450903b9e764294d5197d4d224688183d133bcdb07775fd3fd13eb4cee4448158aa3072799abbf6dc3763"], 0x1, 0x9ce, &(0x7f0000001740)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m1.103980415s ago: executing program 1 (id=31): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x30, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x2000000}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m0.968194774s ago: executing program 1 (id=36): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000f5ff00000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a3000"], 0xa0}}, 0x0) 1m0.908806434s ago: executing program 1 (id=38): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xe, 0x0, 0x7ffc1ffb}]}) getrandom(0x0, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getpeername(r1, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000440)="c3", 0x1, 0xfece) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711292000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) getpriority(0x1, r6) 1m0.661829312s ago: executing program 1 (id=41): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='xprt_transmit\x00', r1}, 0x18) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='xprt_transmit\x00', r1}, 0x18) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) (async) 59.91384509s ago: executing program 1 (id=46): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sessionid\x00') exit(0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/239, 0xef}], 0x1, 0x2, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000101000000800000009821bb5d26cfcd78654081793140e1bb707e75d91e41e7d81bb66aac0490", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) statx(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r4, 0xffffffffffffffff) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) syz_open_procfs(r5, &(0x7f0000000280)='attr/keycreate\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fffeffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES16=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = getpid() syz_pidfd_open(r9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 59.91344864s ago: executing program 32 (id=46): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sessionid\x00') exit(0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/239, 0xef}], 0x1, 0x2, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000101000000800000009821bb5d26cfcd78654081793140e1bb707e75d91e41e7d81bb66aac0490", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) statx(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r4, 0xffffffffffffffff) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) syz_open_procfs(r5, &(0x7f0000000280)='attr/keycreate\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fffeffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES16=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = getpid() syz_pidfd_open(r9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 51.961063595s ago: executing program 3 (id=166): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200401100000e0a01030000000000000000070000000900020073797a31000000000900010073797a30000000001411038010110080081101805e0001"], 0x11d4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000300)={[], [{@measure}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@appraise_type}, {@measure}, {@euid_gt}]}, 0xfe, 0x25e, &(0x7f0000000b40)="$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") lchown(&(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000ed3f740500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000104000000000000dc020000852000000300000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000850000003c00000018120036", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000900000000000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x9200, &(0x7f0000001dc0)={0x10000b}, 0x20) flock(r3, 0x2) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) ioprio_set$pid(0x1, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map=r4, r1, 0x2c, 0xe, r8, @void, @value=r8}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, &(0x7f0000000380), {[{{@ipv6={@local, @private2, [0xffffff00, 0xff, 0xffffffff, 0xffffff00], [0xffffffff, 0x0, 0xff000000, 0xffffff00], 'caif0\x00', 'pimreg0\x00', {0xff}, {}, 0x33, 0x2, 0x38f8fbd76491aad1, 0x42}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x401}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@udplite={{0x30}, {[0x4e20, 0x4e21], [0x4e21, 0x4e23], 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xd69, 0x6b, 0x10000, '\x00', {0xfffffffffffffffa}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) r9 = semget(0x2, 0x1, 0x89) semctl$SEM_INFO(r9, 0x4, 0x13, &(0x7f0000000240)=""/245) dup3(r3, r1, 0x0) 51.756623204s ago: executing program 3 (id=173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00B\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="000000e28016f6e3597b00000000000000edc2821e000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, &(0x7f0000000500)={0x3, 0x40, 0x5, 0xffffffffffff8000, 0x3, 0x3, 0x9, 0x3}, &(0x7f0000000540)={0x101, 0x8001, 0x10, 0x5, 0xdd, 0x7, 0x9, 0x800000000000000}, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={[0x980000000000]}, 0x8}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x12, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x25, 0x0, 0xfe}, {0x35}, {0x16}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0, 0x0, 0xd88d02a0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb9\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x4002) bind$netlink(r5, &(0x7f0000002580)={0x10, 0x0, 0x25dfdbff, 0x10000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) readv(r4, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) r6 = inotify_init() inotify_add_watch(r6, &(0x7f00000002c0)='./file0\x00', 0x51000000) getxattr(0x0, 0x0, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) lsm_get_self_attr(0x68, &(0x7f0000000340)={0x0, 0x0, 0xf8, 0xd8, ""/216}, &(0x7f0000000080)=0xf8, 0x0) 49.964674256s ago: executing program 3 (id=212): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) unshare(0x20000600) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@resuid}, {@errors_remount}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0xe00000000000000, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200", [0x8]}) 49.579721395s ago: executing program 3 (id=220): open(&(0x7f0000000140)='./file0\x00', 0x345de1da563a6655, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) close_range(r2, r2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x2000000000000000}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r1) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 48.876450191s ago: executing program 3 (id=233): r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000088349156a94e4d9200"/28], 0x48) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00\x00'], 0x48}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x0, 0xc, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x20, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={0xffffffffffffffff, &(0x7f0000000cc0)="d065f8e509484f69ed5a8c62ed0c5ef8f6494cb5a974ada1651602fddaa2e3366971bd32238a746756c594455f4cd5a5510c02ac1ad661d9916203d92f5f5a33746adcf615c65593939a9cc88090a5b8e3f5adaedb5c771a6b5eb94da20695a3e0fb2f31dd12008466bf7eb89c06df821c0038a0dfc81a2eb762356ca390318b1c717c", &(0x7f0000000bc0)=""/80}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1e, 0x20, 0x4, 0xff, 0x3, 0x7, @remote}, 0x10) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="18a79cbaee0000000000000000825a04e0ef0000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0xff, @multicast1, 0x2, 0xfffffffc, 'lblcr\x00', 0x1a, 0x0, 0x52}, 0x2c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 48.875274311s ago: executing program 33 (id=233): r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000088349156a94e4d9200"/28], 0x48) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00\x00'], 0x48}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x0, 0xc, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x20, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={0xffffffffffffffff, &(0x7f0000000cc0)="d065f8e509484f69ed5a8c62ed0c5ef8f6494cb5a974ada1651602fddaa2e3366971bd32238a746756c594455f4cd5a5510c02ac1ad661d9916203d92f5f5a33746adcf615c65593939a9cc88090a5b8e3f5adaedb5c771a6b5eb94da20695a3e0fb2f31dd12008466bf7eb89c06df821c0038a0dfc81a2eb762356ca390318b1c717c", &(0x7f0000000bc0)=""/80}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1e, 0x20, 0x4, 0xff, 0x3, 0x7, @remote}, 0x10) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="18a79cbaee0000000000000000825a04e0ef0000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0xff, @multicast1, 0x2, 0xfffffffc, 'lblcr\x00', 0x1a, 0x0, 0x52}, 0x2c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 46.898843833s ago: executing program 5 (id=276): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) fcntl$dupfd(r0, 0x0, r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x8, 0x9, {{0x15, 0x4, 0x0, 0x1, 0x54, 0x64, 0x0, 0xf7, 0x2f, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0xac, 0x3, 0x4, [{@empty, 0x7}, {@rand_addr=0x64010101, 0x1}, {@multicast1}, {@multicast2, 0x800006}]}, @ssrr={0x89, 0x1b, 0xbd, [@rand_addr=0x64010102, @multicast2, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x22}, @multicast1]}]}}}}}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) pipe2$9p(&(0x7f0000000240), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008d2d22a0700000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa21c61cddb000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = fcntl$dupfd(r2, 0x406, r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xfe, 0x2, 0x4, 0x14, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xd}, 0x10, 0x80, 0x6f000000, 0x4}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xa982, 0x0) io_setup(0x6, &(0x7f0000001380)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket$key(0xf, 0x3, 0x2) r10 = dup3(r9, r8, 0x0) sendmsg$key(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0213000005000000000000000000000003"], 0x28}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r11 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r11, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r12, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r11, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r11}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r6, 0x0, 0x0, 0xffffffffffffffff}]) 46.603656982s ago: executing program 5 (id=282): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000020000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value=0x80010000, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r2, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 46.102202009s ago: executing program 5 (id=292): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x2000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="03"], 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x80800, 0x0) (rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x3ff) (async) sendmsg$kcm(r3, 0x0, 0x40024) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, @void, @value}, 0x94) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRESHEX=r5], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000308215aa08e35e0400", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = syz_io_uring_setup(0x339e, &(0x7f0000000300)={0x0, 0x7bf4, 0x400, 0x0, 0x0, 0x0, r2}, &(0x7f0000002480), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000002380)={0x1, 0x0, 0x0, &(0x7f00000022c0)=[{0x0}], 0x0}, 0x20) 45.894409058s ago: executing program 5 (id=297): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_settime(0x0, 0x1, 0x0, &(0x7f00000002c0)) add_key(0x0, 0x0, &(0x7f00000000c0)="01000100000000", 0x7, 0xfffffffffffffffd) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, 0x0}) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000007000000000001000500000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007e17aeb50e64d206793454a80074bfd81b85cca1e935b2a4af0f64ea12bcd18d9dd3cbd5fa697119a4dd648122d7df5af3740c68a375c89619a2ff35cd18d0f04f987be7b7e987edcbd6445292870365605f58716b6b40cd1460edcdbc96602e7f7ced43e98a70870c72985a91bfec10c8e162e0979b1907d803dc1302d2786d2469ed1f88e265f6fb07034b0587a9e6e5d9524a190ec9d9f0703e261f54f27efba209c1471ca37ebf5af420273fbfdc7cb1fa4c13416b1e8dbe8bc3f3d09e2ea9307e7c4584c39efcbdbbe441d1b55c12d7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000080)=ANY=[], 0x38}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000001680)={0x2, 0x4e23, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='fsi_master_acf_cmd_rel_addr\x00', r0, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000007"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 45.597376497s ago: executing program 5 (id=304): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, &(0x7f0000000000)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000440), 0x3d) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) fallocate(r0, 0x10, 0x3, 0x80) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='htcp\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440)=[@window, @window={0x3, 0xc, 0x3}, @window, @timestamp, @sack_perm, @window={0x3, 0x1, 0x2}, @mss={0x2, 0xe32}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r3 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x4000000}, &(0x7f0000000240), &(0x7f0000001880)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440)=r2, 0x1) close(r0) 45.397848447s ago: executing program 5 (id=311): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xd2, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff80009c1101fe8000000000000000200000000000bbff0200000000000000000000000000010000"], 0x0) 45.395049626s ago: executing program 34 (id=311): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xd2, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff80009c1101fe8000000000000000200000000000bbff0200000000000000000000000000010000"], 0x0) 26.216535324s ago: executing program 2 (id=704): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWTABLE={0x258, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x8e, 0x6, "0e4f9f5e27e09dfb484973aa818b011bbc644640bf239ae3cbec2635228014b0698bd87ad2533474b85138a20833f32413aa2d7e6736b26811eb90a44fc1b2c541f32f99e2da9375a130fc5d2ce9a64ffd5562bb99d9977f9110d05a0d7472b9a242ea635775935235e107d3afdeb47fb587da5fb0d16d5cfa015d003b12d4af5204b97fc9f5c9b3fc61"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xe5, 0x6, "fa44e1840e6ef3b57fe3fde16740417505029053e21366cb87db52ca0a65fc39d044df7ab4b56df403902d1c27e20e9297fc463eba0a86f2809e4fd54245e0c6ae639475695ab039b67e3e49ad272303fb33ab96be44bb1065515eb46929fd4ebd388e6f57a6bb401aad1cbdde99c665a5cdf32a95a37896ea7b27825f59d09a9b3120bc2ed01cee8b14b4151f8124aafc237e22f3786171190ba15e139eade240fd706fc8d85d691099f5ca43f44d8d66a5357401fa5678b270bd66a702b167aab566bb975dd0a076d322a54028b08fbeaafd8baad4cd0d150d00d3c50c74443a"}, @NFTA_TABLE_USERDATA={0xad, 0x6, "e1f720e5d00d98f852dedd86831568e80471b02c9ba68d599b54d03f455990e9ff7c28a0152cf0d989ca60551a1f4e4e222efd83ba5be08aaeca059d4c64dde9471e271fbf803a446164f92574ec505818af87da689f699b279b1191974819e3b5f77047de8e189a70916308896d2af1c77f6e6608b9dba3cacc4961ab1367fafdd76f562b4f65b8ddd2f361d4f7c52f018bda270c5d3d087abfc2d80a63590323c2db0caac5e555b6"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x2c0}, 0x1, 0x0, 0x0, 0x1000}, 0x40000e0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40eb, 0x0, r3, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)) 25.713902411s ago: executing program 2 (id=711): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, {0x0, @local}, 0xc, {0x2, 0x0, @rand_addr=0x1}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './cgroup/cgroup.procs\x00'}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x2, [0x401, 0xa80]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000018190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$TCSETSW2(r6, 0x5435, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2a000800450000380000000000019078ac1e00b29e01d301ac1414aa0304907800000000450000000000000000010000ac141400ac1414aa0000000000000004"], 0x0) 25.55741711s ago: executing program 2 (id=716): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x870f) 25.48324528s ago: executing program 2 (id=720): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/75, 0x8e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e80)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="050000001500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB='\x00\x00\x00\x00!'], 0x48}}, 0x0) 25.295736879s ago: executing program 2 (id=725): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r1, r0) sendmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000003380)=@phonet={0x23, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000003740)=[{0x10, 0x11, 0x10}, {0x10, 0x110, 0x10000}], 0x20, 0xfff5}}, {{0x0, 0x0, &(0x7f0000004e40)=[{&(0x7f0000003bc0)="fed03fb88387d9e85153421af60a67797e73d9dfc64af5b6805abdfa7bbbb386b58e231012265023b3ad5fef6d142d186343af44df4472b265a262fd9a7c8b6e8674543b48f7d61190dd847e66e686c89cf16062cc99ca97d5cbc4839a4a8ed8e5d79fce0555728215009602f1de0510a3001efde441f762566275d13b2921166408488bd306b359c59010e72f7691fe49dc24858d42be271963e440359f09235afbcce5289afd035c1443bc3c08642bf166a55359c95570557f8b1d6c67d68fdba612682d19f71a99c783153f70c007601b8211835efccaff68c35f1973de558f8ef05a3a0c7ea30ba3", 0xea}, {&(0x7f0000003cc0)="4a539be9032886f60684a6aeb8f07cff0c97cb6c21c1586489f92d1bc1069a0a61bdb8e0d8c54ce3afcbc2af3874f821432886d67ffefebaff38df7e59c748cd3d514d3ef33d0072d6abd6ce6c12a3aac6f6017be714777a4b13c802bcb85799960c01ac9c50e0e45078bb1d82f5c3ab9d1fc607a375eceea18a54610a92f9d72272bd76185eef6cdfcad766aae53ce0391772553c22f043d09a51ccdf1958e6da854991fafdc13654d5baa9bea8378c6eeccec0a1cf8fab325418452711359e8ebd5f1a9c8347d972b431b30ab8059beefc5cfb0070e31fa23b0d7885bd613fc074be26e72a6e2271fd65aa03ed4fb2df7bab6f7d83a141a0eb0f639545c9b09537373cc48f05948af00bee9427ce1682d04189d1c064f6c83e6f147baf5554e37c2893e47cd9fe7bf39d6de3f591dda4f968b5f61d514b29877c30fee5f8617e50b87b679718d7c0ae4df93171047c944cf66f392f0f760b335033ac4fb9f834338e5de690dfa7f5bdadba4eb0ab56cb810ad1eb54d468be39ca0f609ceccd12179e39e1833b36e4580bae1e050eb48aa8274b9a297116bd037e85c69953500e527bb505800234b68200f42fddb4d572490cbde63646b90c6565982e3d0e1d133788c020039b2876ca2ae409aaac7f2c67a237ba6a889d4bf5c931490ca9e3a1fea05d19fe55251605916fed57f88a60d7d8c76f73fd74d5cac2f5baeb1dc644ddc487930310e4ffc7057247d67a68bab8913209a9b79f918e4d1f325063d77aadc1a82f241a2e4c3893ee9f991bbd2b7257cea54caaf3f6968d65f1f935019eab59843708a0b048f386e4f45efe6b3fd4df466cc1d2255564b9f1b678544ecf3036fa97c02616fab2e10823284ec58fff9faf1f3ff568a022d86fc1e9bb0d148362e3963838833381e9028358be2ff699ed1d38df3d3b6fc3d6657667d34c05d8e61b899a9b48c193d1ea986a4419470fcd62ca7dfa4d487e85bcac86774ae173f5a80ec61a9731c783e78ef2e8ac3dd93f2c350df23db3ca2c34770282cff1e9ddbb96aad76768235c741785ece2fb1354dc800a4125bf68d27189463dd20fa968d3c530a9524a9074819df1788bb2139e655723af4338170c2c847c74092619d32eb550822a53c34157d737ec52d3d7a8c2191243bd6959b019ac01d8dc31e9993ff9146f1bf05b40915240ac147c491bd707d949419c57571c29bd0f93a27711a4d671565c1660524e18858ed61e11ba08bafbb6ee546ac65db8797d3242b893842cf93d715c3e90bb6552c65f067c395801e884620aafb1e8e87bba3c80ae1555b550b7fee9bdbd08d67ae36799fc47204a9911a77c12c77e3a5162784cd56cb3f3a925ef0af539d36c57dc42ccec45e1fde22fd8d0fcd6e4847bc0fbc4db1320af7144d695be794b3a85b70c77193577e408c0946ae6a8230d6ad6fb3576c9595c823ff7a8bf5c014e3d1baf1c1b664e090be9b5b8af28a2beac0f8bc33bd3bf69f24c250d62fb16d731fca070c9508e983eeece201df58b63811b8e507334c2c06e385ac2fac99e70a48b39b30ab108b2f78844e6b250fb7c6f07f0f241d1afdb17bd4808a1ca9ef2a426c94c34aa1a4e8e10e8eb6380859f7c5c0883e0bae92cd42a0226e85966f7d437a8a49a8739d1d7ec3307e9a381b49a54650b60007060a298cc569194a646e6e6f9115ff4811687760c62a3ae74802ac8b398cff6dee071af0b5a5e1aeba68917f277ec858cf3e812c512e264fbbd2765f0c62ed0db1935656259b9fe5a3d42aab695b1f8", 0x4f3}], 0x2}}], 0x6, 0x200000d1) 24.428525575s ago: executing program 2 (id=744): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r2, 0x0, 0x3}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r4, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) gettid() ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) 22.148435546s ago: executing program 6 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000cb9b2ef1db4a115b00"/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) (async, rerun: 32) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@ipmr_newroute={0x2c, 0x18, 0x300, 0x70bd26, 0x25dfdbfd, {0x80, 0x14, 0x14, 0x3, 0xfe, 0x1, 0x0, 0xb, 0x2000}, [@RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_FLOW={0x8, 0xb, 0xfffffff6}]}, 0x2c}}, 0x0) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 22.033886456s ago: executing program 6 (id=820): r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) 21.892153655s ago: executing program 6 (id=822): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000090628bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="adffa8880000000038001280090001006970697000000000280002800400130005000a000000000008000300ac1414bb050009000400000006000f000000000008000a00", @ANYRES32=r3, @ANYBLOB="837f8d"], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_delroute={0x80, 0x19, 0x0, 0x70bd27, 0x25dfdbff, {0x2, 0x14, 0x14, 0x42, 0xff, 0x2, 0xfe, 0x5, 0x1100}, [@RTA_ENCAP_TYPE={0x6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x75b431a3aa8dd6ad}, @RTA_PRIORITY={0x8, 0x6, 0xb}, @RTA_OIF={0x8, 0x4, r3}, @RTA_NH_ID={0x8, 0x1e, 0x7}, @RTA_DST={0x8, 0x1, @empty}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5, 0x2, 0xf7}}}}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x1) bind$packet(r0, &(0x7f0000000040)={0x11, 0xf32e2bad1b2e41a7, r3, 0x1, 0x70, 0x6, @multicast}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004480)={&(0x7f0000004340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0xd, 0x1}]}, {0x0, [0x2e, 0x27]}}, 0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 21.761861484s ago: executing program 6 (id=828): r0 = socket$inet(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="190000000400000008000000040000ff5f90c764a130539c57e83091b00d0000000000b0994334f06a8c27c62d16a4dafbef35dc07b67c2c73ed187d2e694669a540e79729bb8be02e3730776615e9fc6a6e6859c8eb4f10b269c44357d2669b3b8886714422f8266bd28b94fa754c0c9e522653a0e38614a7062b2152cd3c9be541c6f3775bd0697aa6e381919f08de407e6e492d169c77c89acab243144cb164d4f07277e4605bc5e4d2c4de9a2f3d90785595dc6bff9aa3ab2e0fa30af7618c71cebc177f8b3ab7d6bc74ea3a0082a4b8cec2b8e76e29a464fb8e07fc832db13ff303fe74f03fc78e4eb897ce8aa72bd159a8df8390459bb002531978aa694e86acc1efd6fc133120db252ba01741", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r6, r6, 0x0, 0x80000000) getrandom(&(0x7f0000000800)=""/291, 0x123, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r7, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r10}}) tkill(r8, 0x35) ptrace$peeksig(0x4209, r8, &(0x7f00000001c0)={0x1, 0x0, 0x1}, &(0x7f0000000d00)=[{}]) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 21.611085983s ago: executing program 6 (id=835): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x3, 0x10100, 0x3}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000020240)='./file1\x00'}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 21.261909092s ago: executing program 6 (id=840): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x200000, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f00000017c0)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x1000) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000140)) sendto$packet(r3, &(0x7f0000000340)="05000806", 0x4, 0x20000084, &(0x7f0000000080)={0x11, 0x8100, r4, 0x306}, 0x14) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r5, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, r1, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 21.261621612s ago: executing program 35 (id=840): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x200000, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f00000017c0)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x1000) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000140)) sendto$packet(r3, &(0x7f0000000340)="05000806", 0x4, 0x20000084, &(0x7f0000000080)={0x11, 0x8100, r4, 0x306}, 0x14) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r5, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, r1, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 9.382124731s ago: executing program 36 (id=744): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r2, 0x0, 0x3}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r4, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) gettid() ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) 4.229663708s ago: executing program 4 (id=1109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) close(r1) 4.183495568s ago: executing program 4 (id=1111): r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x1, 0x7, 0xf9, 0x9, 0x0, 0x7fff, 0x8093, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x20a, 0x7a2, 0x53e80bd0, 0x6, 0x7757, 0x3, 0xfffb, 0x0, 0x6, 0x0, 0xffffffffffffffff}, r0, 0x6, 0xffffffffffffffff, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x48}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x141}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb}]}, 0x78}, 0x1, 0x0, 0x0, 0x48084}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf8, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffff2e}, {0x6, 0x11, 0xa}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf9e}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1d}, {0x6}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x49c4}, 0x2004c085) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setown(r1, 0x8, r0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x10, 0x18, {0x5, @bearer=@l2={'ib', 0x3a, 'sit0\x00'}}}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x804c044}, 0x88) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa4, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x8b, 0x7ff, 0x3, 0x7ff, 0xf, 0x6, 0x8]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}], @NL80211_ATTR_FRAME={0x34, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x71}, @broadcast, @device_a, @from_mac=@device_b, {0x8, 0x8}, @value=@ver_80211n={0x0, 0xd, 0x2, 0x3, 0x0, 0x3, 0x1}}, 0x3d, @val={0x8c, 0x10, {0x909, "a77c88e90c27", @short="5a157b605f896697"}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_FRAME={0x2b, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7ff9}, @device_b, @device_a, @initial, {0x2, 0xff7}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0x8, 0x9}}, @void, @val={0x76, 0x6, {0x4, 0xf8, 0x21, 0x5}}}}}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40810}, 0x8000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, 0x1405, 0x800, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x4000065) r5 = syz_open_dev$vcsu(&(0x7f0000000800), 0x2, 0x400a00) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x81}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x44) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000a00)={0x4, 0x8, 0xfa00, {r6, 0x38}}, 0x10) syz_pidfd_open(r0, 0x0) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000a40)={[0x1]}, 0x0, &(0x7f0000000ac0)={r7, r8+10000000}, 0x8) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000b00)={@empty, @empty, @dev={0xfe, 0x80, '\x00', 0x21}, 0xa, 0x9, 0x4, 0x200, 0x8000}) getpgid(r0) recvfrom(r1, &(0x7f0000000b80)=""/33, 0x21, 0x10000, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x625, 0x2b}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r5, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0)={r10}, 0x4) syz_open_dev$usbfs(&(0x7f0000000e00), 0x6, 0x40) timer_settime(0x0, 0x0, &(0x7f0000001000)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000001040)) 3.296576884s ago: executing program 4 (id=1127): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600000000054060000000000000000000000ffff07000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50e2000090780000080a0000000000000000030a0000000000000000fe08f989e8e82b840502000b317275"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x54, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0xe8, 0xf5, 0x6, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x47, 0xc, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x8, 0x8, 0x0, 0x40, {{0x8, 0x4, 0x2, 0x29, 0x20, 0x64, 0x0, 0xd, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x86, 0xa, "882f8b8aef83ba88"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'tunl0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x8, 0x1, 0x400, 0xde6, {{0x36, 0x4, 0x3, 0x4, 0xd8, 0x68, 0x0, 0x1, 0x2f, 0x0, @multicast1, @multicast2, {[@ssrr={0x89, 0x13, 0xbd, [@empty, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010102]}, @timestamp={0x44, 0x18, 0xbb, 0x0, 0x4, [0x4, 0x28264421, 0x2, 0x8, 0xffff]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x7, 0xc, "7482a219aa9122c79c10"}, {0x7, 0x6, "ebacdd54"}]}, @lsrr={0x83, 0x27, 0xfc, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}, @private=0xa010101, @loopback, @remote, @empty, @loopback, @multicast2, @private=0xa010102]}, @timestamp_prespec={0x44, 0x1c, 0x5f, 0x3, 0xa, [{@remote, 0x8}, {@multicast2, 0x400}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x2}]}, @end, @rr={0x7, 0x17, 0x3a, [@broadcast, @rand_addr=0x64010101, @empty, @remote, @empty]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x2b, 0x0, 0xe, [0x4, 0x9, 0xb, 0x2, 0x1d9, 0x200, 0x8]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x3, 0x8001, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @loopback, @remote, {[@noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x8000, 0xf808, 0x6fdf, 0x425d, {{0x20, 0x4, 0x3, 0x8, 0x80, 0x68, 0x0, 0x7f, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010100, {[@ssrr={0x89, 0x23, 0xbe, [@remote, @rand_addr=0x64010100, @multicast2, @multicast2, @private=0xa010100, @empty, @local, @local]}, @ssrr={0x89, 0x7, 0x3d, [@private=0xa010101]}, @lsrr={0x83, 0x13, 0x7e, [@private=0xa010102, @broadcast, @broadcast, @loopback]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x2b, 0x51, [@rand_addr=0x64010102, @rand_addr=0x64010102, @broadcast, @broadcast, @multicast2, @loopback, @empty, @rand_addr=0x64010101, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x16}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x2f, 0xfb, 0x8a, 0x8, 0x1, @remote, @mcast2, 0x20, 0x1, 0x3, 0x7}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x124, r6, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='rxrpc_tx_ack\x00', r14}, 0x18) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r16, 0x0, r15, 0x0, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r17 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close(r17) ioctl$int_in(r15, 0x5452, &(0x7f0000000100)=0x3ff) r18 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r18, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x5b0, 0x0, 0x2b8, 0xb0000010, 0x248, 0x5c8f0200, 0x4e0, 0x3a8, 0x3a8, 0x4e0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x73, 0x0, 0x2}, 0x0, 0x228, 0x248, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x60, 0x0, 0x2f7d5cc6, 0xffdffffa, 0x6, 0x2, 0xb0, 0x68}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x230, 0x298, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'dummy0\x00', {0xba7b, 0x59, 0x20, 0x6f1f6a1, 0x6, 0x2, 0x7, 0x10, 0x8, 0x40}, {0x7}}}, @common=@frag={{0x30}, {[0x1, 0x5], 0x40, 0x5, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x7, 0x6e9a, 0x101, 'pptp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) 955.500004ms ago: executing program 7 (id=1187): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) open(0x0, 0x400141042, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100fe0f00000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 882.501784ms ago: executing program 7 (id=1188): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600000000054060000000000000000000000ffff07000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50e2000090780000080a0000000000000000030a0000000000000000fe08f989e8e82b840502000b317275"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, 0x0) 862.650624ms ago: executing program 7 (id=1189): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff0}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x0, 0x0, 0xaa}}, @TCA_U32_HASH={0x8, 0x2, 0x9}]}}]}, 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xfff2) 841.931544ms ago: executing program 7 (id=1190): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2d) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) (async) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x8004745a, 0x2000000c) (async) ioctl$TUNSETOFFLOAD(r2, 0x8004745a, 0x2000000c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x74) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat(r1, 0x0, 0x109042, 0x55) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmmsg$inet6(r0, &(0x7f0000004700)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000440)="87", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x2, 0x48081) (async) sendmmsg$inet6(r0, &(0x7f0000004700)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000440)="87", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x2, 0x48081) 713.907903ms ago: executing program 8 (id=1193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000efff00000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f980000000c0a01010000000000000000010000000900020073797a32000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000050c00024000000000000000002c0001800a0001006c696d69740000001c0002800c00024000000000000000000c00014000000000000000020900010073797a30"], 0x11c}}, 0x4a8c0) 713.561463ms ago: executing program 8 (id=1194): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r4}, 0x9) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) statx(r3, &(0x7f0000000240)='./file0\x00', 0x1000, 0x80, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = geteuid() mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x200000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@access_user}, {@posixacl}, {@mmap}, {@afid={'afid', 0x3d, 0x101}}, {@version_u}], [{@uid_lt={'uid<', r6}}, {@fsname={'fsname', 0x3d, 'H\xb4'}}, {@uid_lt={'uid<', r7}}, {@smackfsroot={'smackfsroot', 0x3d, '9p\x00'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, 'kmem_cache_free\x00'}}, {@dont_appraise}, {@obj_user}, {@fsname={'fsname', 0x3d, 'GPL\x00'}}, {@measure}]}}) sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x1, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3}, 0x1c) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x18) shutdown(r5, 0x1) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40eb, 0x0, r3, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r10 = socket$kcm(0xa, 0x3, 0x3a) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000180)={0x0, 0x0}, 0x10) pipe2$9p(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x300}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)) 692.535083ms ago: executing program 8 (id=1195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 684.408823ms ago: executing program 7 (id=1196): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") 612.103212ms ago: executing program 7 (id=1197): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) epoll_create1(0x80000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x10000000000000, 0x7fffffff}, 0x0, 0x0) 586.583102ms ago: executing program 8 (id=1198): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000202070250000000000202020fb1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000180)='./file1\x00', 0x1000410, &(0x7f0000000200)={[{@nouid32}, {@grpquota}, {@noblock_validity}]}, 0x4, 0x4fe, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000640)={0x1d, r4}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r6, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 507.030802ms ago: executing program 0 (id=1201): ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000000)=0x1) (async) r0 = dup(0xffffffffffffffff) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$TCSBRK(r2, 0x5409, 0x5332d1a3) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) close_range(r0, r0, 0x0) (async) r4 = socket(0x1, 0x5, 0x100) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0xa0000000}) r5 = getuid() statx(r0, &(0x7f0000000140)='./file0\x00', 0x100, 0x20, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x109000, &(0x7f0000000340)={[{@uid={'uid', 0x3d, r5}}, {@quota}, {@huge_advise}, {@nr_blocks={'nr_blocks', 0x3d, [0x57]}}, {@usrquota}, {@huge_never}], [{@euid_gt={'euid>', r6}}, {@uid_lt={'uid<', r8}}]}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x20, 0x8, 0x8, 0x2, {{0x1c, 0x4, 0x0, 0x0, 0x70, 0x64, 0x0, 0x4, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x1e, 0x1, 0x8, [{@broadcast, 0x7ff}]}, @ssrr={0x89, 0x1b, 0x8, [@loopback, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1]}, @end, @ssrr={0x89, 0x17, 0x41, [@rand_addr=0x64010100, @broadcast, @rand_addr=0x64010100, @multicast1, @multicast2]}, @generic={0xb, 0x8, "e531f0863fb6"}, @ssrr={0x89, 0x13, 0x89, [@multicast1, @rand_addr=0x64010101, @loopback, @empty]}, @noop]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f00000003c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000400)='syzkaller\x00', 0x7, 0x27, &(0x7f0000000440)=""/39, 0x41000, 0x8, '\x00', r9, 0x0, r0, 0x8, &(0x7f0000000580)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x4, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000600)=[r2], &(0x7f0000000640)=[{0x5, 0x3, 0x8, 0x5}, {0x4, 0x3, 0x6, 0x9}, {0x2, 0x1, 0x4, 0xb}, {0x1, 0x4, 0x3, 0x9}, {0x2, 0x5, 0x4, 0x3}], 0x10, 0xc, @void, @value}, 0x94) (async) ioctl$sock_proto_private(r3, 0x89e3, &(0x7f0000000780)="a40bb89c0ea28227e52a3dac028d763e52ee8756d801a791c7c070a3cbb597bb2feac5852ddec29b7099154cda0a419ce53185ef2d54b0771bfe3ef750786d13aa9de058bf2a4651fec78a5b5ee4dfac0b9f6f5c3925ef87ff5a254db05c883c6c298e2c4fa452ac11") setxattr$trusted_overlay_nlink(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840), &(0x7f0000000880)={'L-', 0x3}, 0x16, 0x2) getresuid(&(0x7f0000000940), &(0x7f0000000980)=0x0, &(0x7f00000009c0)) mount$bpf(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x3004, &(0x7f0000000a00)={[{@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x5}}, {@uid={'uid', 0x3d, r5}}], [{@fowner_lt={'fowner<', r10}}, {@subj_role={'subj_role', 0x3d, '\'(%-.:+\''}}]}) (async) r11 = syz_open_dev$tty1(0xc, 0x4, 0x4) mount$9p_fd(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x58000, &(0x7f0000000b40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@nodevmap}, {@ignoreqv}], [{@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x65, 0x61, 0x64, 0x34, 0x62, 0x35, 0x33], 0x2d, [0x63, 0x35, 0x35, 0x52], 0x2d, [0x3, 0x63, 0x30, 0x66], 0x2d, [0x3c, 0x31, 0x33, 0x30], 0x2d, [0x30, 0x53, 0x65, 0x34, 0x30, 0x65, 0x64, 0x61]}}}, {@fowner_eq={'fowner', 0x3d, r6}}]}}) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x0, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@access_any}, {@loose}, {@dfltgid={'dfltgid', 0x3d, r7}}, {@noxattr}, {@mmap}, {@ignoreqv}], [{@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'usrquota'}}, {@dont_hash}]}}) syz_io_uring_setup(0x4b9c, &(0x7f0000000d80)={0x0, 0x954e, 0x0, 0x2, 0x304, 0x0, r0}, &(0x7f0000000e00)=0x0, &(0x7f0000000e40)) (async) r13 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000b, 0x11, r2, 0x10000000) syz_io_uring_submit(r12, r13, &(0x7f0000000e80)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x8, 0x0, r4, 0x0, 0x0, 0x0, 0x10002, 0x1}) (async) semget$private(0x0, 0x3, 0x610) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000ec0)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x38, 0x0, "642bd94ef2f0d7e85b61500d4aad85ee856d674b6e0661292edae939c9d1c5ed8d781543f93e6d18b051473631583aa57fc7da1165e5341f939da890c4c12e6e9db1827238702ee2793ea070516ea1ad"}, 0xd8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001000)=@o_path={&(0x7f0000000fc0)='./file0\x00', r0, 0x4000, r3}, 0x18) sendmsg$nl_xfrm(r4, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)=@newspdinfo={0x4c, 0x24, 0x300, 0x70bd26, 0x25dfdbfb, 0x1, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x4c}}, 0x4000004) (async) execve(&(0x7f0000001180)='./file0\x00', &(0x7f0000001240)={[&(0x7f00000011c0)='Q(&C{@-@\x00', &(0x7f0000001200)='noxattr']}, &(0x7f0000001400)={[&(0x7f0000001280)='/\x00', &(0x7f00000012c0)=']\'(.@*^$\'\x00', &(0x7f0000001300)='nr_blocks', &(0x7f0000001340)='staff_u', &(0x7f0000001380)='\x00', &(0x7f00000013c0)='\x00']}) 479.653772ms ago: executing program 8 (id=1202): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000200000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 427.270052ms ago: executing program 0 (id=1203): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e0000000200"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x393, 0x0) 427.010512ms ago: executing program 8 (id=1204): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x3, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x4000000, @loopback, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x10000, &(0x7f0000000000)=0x1) 424.635452ms ago: executing program 0 (id=1206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000040) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000002f00000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}}, 0x4000894) 358.020791ms ago: executing program 0 (id=1207): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000240000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30"], 0x122}}, 0x4008090) 357.640672ms ago: executing program 0 (id=1208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 356.496211ms ago: executing program 9 (id=1209): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) fcntl$dupfd(r0, 0x0, r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x8, 0x9, {{0x15, 0x4, 0x0, 0x1, 0x54, 0x64, 0x0, 0xf7, 0x2f, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0xac, 0x3, 0x4, [{@empty, 0x7}, {@rand_addr=0x64010101, 0x1}, {@multicast1}, {@multicast2, 0x800006}]}, @ssrr={0x89, 0x1b, 0xbd, [@rand_addr=0x64010102, @multicast2, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x22}, @multicast1]}]}}}}}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) pipe2$9p(&(0x7f0000000240), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008d2d22a0700000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa21c61cddb000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = fcntl$dupfd(r2, 0x406, r3) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xa982, 0x0) io_setup(0x6, &(0x7f0000001380)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) dup3(r8, r7, 0x0) r9 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r9, 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r10, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r9}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r5, 0x0, 0x0, 0xffffffffffffffff}]) 331.814791ms ago: executing program 0 (id=1210): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="90354d5d8a095ce7b105af2fb714d44b2e30b4f60ae18ba0a04a1df60a6226a2e5bf9d0c39600a606e1b36abbedbe7657ec53b4cbc3e816eeb70093464a48df16e02e7b983f71d1170e210c594fb98c94bee5fa77ce738e6abe4ecad5ed508b18b44bc8d0d8b937d2ab9004dd6f6d61bda9f2de3d78d6f3e95a686baa8f0420235b5418674414be22e"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x10000001}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x4, 0x2}, 0x10) bind$tipc(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYRES64=r4], &(0x7f0000000000)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r9, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000000e40)=""/226, 0xe2}], 0x2) sendmsg$can_bcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 150.16432ms ago: executing program 9 (id=1211): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff0}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x0, 0x0, 0xaa}}, @TCA_U32_HASH={0x8, 0x2, 0x9}]}}]}, 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0xfff2) 114.61755ms ago: executing program 9 (id=1212): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000001085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 58.00233ms ago: executing program 9 (id=1213): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x510, 0x0, 0x11, 0x148, 0x0, 0x0, 0x478, 0x2a8, 0x2a8, 0x478, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x1fffffff, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x138, 0x0, {0x0, 0x100000}, [@common=@set={{0x40}, {{0x1, [0x2, 0xb, 0x5, 0x3, 0x6, 0x2], 0x1, 0x6}}}, @common=@unspec=@cpu={{0x28}, {0xfffffffe, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x5, 0x6, 0x7, 0x6, 0x2], 0x4}, {0x2, [0x5, 0x0, 0x3, 0x0, 0x7, 0x5], 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 57.69552ms ago: executing program 9 (id=1214): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000480)={[{@unhide}, {@utf8}, {@map_acorn}, {@map_normal}, {@nojoliet}, {@hide}, {@hide}, {@nocompress}, {@dmode={'dmode', 0x3d, 0x1}}, {@block={'block', 0x3d, 0x200}}, {@sbsector={'sbsector', 0x3d, 0x8}}, {@showassoc}, {@utf8}], [], 0x2c}, 0x1, 0x9ce, &(0x7f0000001740)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0xf0, 0x6c, 0x300, 0x0, 0x0, 0x1e8, 0x2e8, 0x2e8, 0x1e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @local, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='cachefiles_io_error\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) epoll_create1(0x0) 12.75795ms ago: executing program 4 (id=1215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b3300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000010001d800c0000800500040008000000"], 0x38}}, 0x0) 0s ago: executing program 9 (id=1216): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000004000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 6 audit(1735902386.061:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.6.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5748c35d29 code=0x7ffc0000 [ 51.698036][ T29] audit: type=1326 audit(1735902386.061:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.6.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f5748c35d29 code=0x7ffc0000 [ 51.721433][ T29] audit: type=1326 audit(1735902386.061:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.6.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5748c35d29 code=0x7ffc0000 [ 51.744682][ T29] audit: type=1326 audit(1735902386.061:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.6.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5748c35d29 code=0x7ffc0000 [ 51.768529][ T29] audit: type=1326 audit(1735902386.061:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.6.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5748c35d29 code=0x7ffc0000 [ 51.786681][ T4911] loop4: detected capacity change from 0 to 2048 [ 51.792035][ T29] audit: type=1326 audit(1735902386.061:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.6.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5748c35d29 code=0x7ffc0000 [ 51.821547][ T29] audit: type=1326 audit(1735902386.061:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5748c35d29 code=0x7ffc0000 [ 51.844352][ T29] audit: type=1326 audit(1735902386.061:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5748c35d29 code=0x7ffc0000 [ 51.864622][ T3000] loop2: p1 < > p4 [ 51.867196][ T29] audit: type=1326 audit(1735902386.061:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5748c35d29 code=0x7ffc0000 [ 51.894040][ T29] audit: type=1326 audit(1735902386.061:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5748c35d29 code=0x7ffc0000 [ 51.894718][ T3000] loop2: p4 size 8388608 extends beyond EOD, truncated [ 51.931632][ T4812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.940021][ T4873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.948309][ T4917] vlan0: entered promiscuous mode [ 51.972069][ T4812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.985301][ T4911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.999563][ T4913] vlan0: left promiscuous mode [ 52.010974][ T4784] udevd[4784]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 52.038938][ T4974] bpf_get_probe_write_proto: 2 callbacks suppressed [ 52.038955][ T4974] syz.2.341[4974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.046935][ T4974] syz.2.341[4974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.065617][ T4784] udevd[4784]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 52.086790][ T4974] syz.2.341[4974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.104145][ T4784] udevd[4784]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 52.111227][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 52.135742][ T4983] syz.6.343[4983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.135793][ T4983] syz.6.343[4983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.157783][ T4812] team0: Port device team_slave_0 added [ 52.167658][ T4983] syz.6.343[4983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.172389][ T4812] team0: Port device team_slave_1 added [ 52.193449][ T4987] xt_TPROXY: Can be used only with -p tcp or -p udp [ 52.196711][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.217415][ T4812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.224489][ T4812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.250544][ T4812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.300218][ T4991] loop2: detected capacity change from 0 to 1024 [ 52.311576][ T4812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.318653][ T4812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.344625][ T4812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.355917][ T4991] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 52.382234][ T4991] JBD2: no valid journal superblock found [ 52.388041][ T4991] EXT4-fs (loop2): Could not load journal inode [ 52.469453][ T5017] loop2: detected capacity change from 0 to 512 [ 52.476630][ T4812] hsr_slave_0: entered promiscuous mode [ 52.493545][ T4812] hsr_slave_1: entered promiscuous mode [ 52.508379][ T4812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.509885][ T5017] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.351: casefold flag without casefold feature [ 52.528045][ T4812] Cannot create hsr debugfs directory [ 52.535747][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.662486][ T5026] netlink: 60 bytes leftover after parsing attributes in process `syz.6.353'. [ 52.708099][ T5026] netlink: 60 bytes leftover after parsing attributes in process `syz.6.353'. [ 52.718890][ T4812] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 52.727617][ T4812] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 52.736696][ T4812] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 52.748479][ T4812] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 52.781799][ T5044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 52.805051][ T5017] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.351: couldn't read orphan inode 15 (err -117) [ 52.815774][ T5032] IPv6: NLM_F_CREATE should be specified when creating new route [ 52.825092][ T5026] netlink: 60 bytes leftover after parsing attributes in process `syz.6.353'. [ 52.834568][ T5017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.875615][ T5026] netlink: 60 bytes leftover after parsing attributes in process `syz.6.353'. [ 52.902608][ T5032] loop6: detected capacity change from 0 to 512 [ 52.941439][ T5046] wireguard0: entered promiscuous mode [ 52.946953][ T5046] wireguard0: entered allmulticast mode [ 52.990187][ T5032] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.039895][ T5032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.121397][ T5032] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.138416][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.209812][ T5026] netlink: 60 bytes leftover after parsing attributes in process `syz.6.353'. [ 53.222106][ T4812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.254850][ T5026] netlink: 60 bytes leftover after parsing attributes in process `syz.6.353'. [ 53.269131][ T4812] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.279147][ T4959] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.286340][ T4959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.298830][ T5032] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 53.333269][ T4959] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.340366][ T4959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.386191][ T4549] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.393868][ T4812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.405562][ T4812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.518975][ T4812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.623511][ C1] hrtimer: interrupt took 39994 ns [ 53.671824][ T5133] netlink: 'syz.4.362': attribute type 10 has an invalid length. [ 53.681721][ T5133] syz_tun: entered promiscuous mode [ 53.698695][ T5133] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 53.730831][ T5137] netlink: 44 bytes leftover after parsing attributes in process `syz.6.363'. [ 53.771862][ T4812] veth0_vlan: entered promiscuous mode [ 53.783175][ T5137] Zero length message leads to an empty skb [ 53.792019][ T4812] veth1_vlan: entered promiscuous mode [ 53.818909][ T4812] veth0_macvtap: entered promiscuous mode [ 53.834677][ T4812] veth1_macvtap: entered promiscuous mode [ 53.848605][ T5148] loop6: detected capacity change from 0 to 2048 [ 53.854050][ T4812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.865438][ T4812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.875267][ T4812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.883428][ T5148] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.885766][ T4812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.892189][ T5148] EXT4-fs: Ignoring removed i_version option [ 53.901946][ T4812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.918488][ T4812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.941648][ T5147] tmpfs: Unknown parameter '(Èr' [ 53.951890][ T5151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.978369][ T5151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.987360][ T4812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.996818][ T5153] vlan2: entered promiscuous mode [ 54.027441][ T4812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.037912][ T4812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.047839][ T4812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.058450][ T4812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.068281][ T4812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.078728][ T4812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.095897][ T4812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.111653][ T4812] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.120497][ T4812] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.129288][ T4812] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.138004][ T4812] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.181000][ T5148] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.267756][ T4549] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.287060][ T5176] loop7: detected capacity change from 0 to 164 [ 54.320252][ T5176] Unable to read rock-ridge attributes [ 54.343207][ T5176] Unable to read rock-ridge attributes [ 54.374152][ T5189] tmpfs: Unknown parameter '(Èr' [ 54.376900][ T5185] bond1: entered promiscuous mode [ 54.384521][ T5185] bond1: entered allmulticast mode [ 54.391366][ T5185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.439698][ T5185] bond1 (unregistering): Released all slaves [ 54.454256][ T5192] netlink: 'syz.7.380': attribute type 4 has an invalid length. [ 54.462006][ T5192] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.380'. [ 54.479756][ T5194] ip6tnl1: entered promiscuous mode [ 54.484974][ T5194] ip6tnl1: entered allmulticast mode [ 54.500957][ T5201] loop4: detected capacity change from 0 to 1764 [ 54.570458][ T5209] loop4: detected capacity change from 0 to 2048 [ 54.577140][ T5209] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.583768][ T5209] EXT4-fs: Ignoring removed i_version option [ 54.647305][ T5212] syz.0.387[5212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.647443][ T5212] syz.0.387[5212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.659073][ T5212] syz.0.387[5212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.676830][ T5212] loop0: detected capacity change from 0 to 1024 [ 54.683696][ T5209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.707527][ T5212] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.721958][ T5212] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.387: Invalid block bitmap block 0 in block_group 0 [ 54.735872][ T5212] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.387: Failed to acquire dquot type 0 [ 54.747370][ T5212] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.387: Freeing blocks not in datazone - block = 0, count = 4096 [ 54.761075][ T5212] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.387: Invalid inode bitmap blk 0 in block_group 0 [ 54.773889][ T5212] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 54.774005][ T4915] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:22: Failed to release dquot type 0 [ 54.783876][ T5212] EXT4-fs (loop0): 1 orphan inode deleted [ 54.797199][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.800356][ T5212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.860526][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.916997][ T5235] loop0: detected capacity change from 0 to 164 [ 54.924722][ T5235] Unable to read rock-ridge attributes [ 54.932210][ T5235] Unable to read rock-ridge attributes [ 54.950319][ T5237] tmpfs: Unknown parameter '(Èr' [ 54.989611][ T5241] netlink: 80 bytes leftover after parsing attributes in process `syz.4.395'. [ 55.014442][ T5239] loop0: detected capacity change from 0 to 512 [ 55.042837][ T5239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.056037][ T5239] ext4 filesystem being mounted at /92/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.149949][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.289809][ T5257] netlink: 'syz.0.401': attribute type 153 has an invalid length. [ 55.309018][ T5262] loop7: detected capacity change from 0 to 764 [ 55.328249][ T5262] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 55.362397][ T5266] loop4: detected capacity change from 0 to 164 [ 55.376997][ T5266] Unable to read rock-ridge attributes [ 55.404555][ T5266] Unable to read rock-ridge attributes [ 55.439153][ T5269] tmpfs: Unknown parameter '(Èr' [ 55.442175][ T5271] netlink: 'syz.0.406': attribute type 1 has an invalid length. [ 55.514365][ T5271] bond1: entered promiscuous mode [ 55.555202][ T5275] bond1 (unregistering): Released all slaves [ 55.582909][ T5271] team0: Port device team_slave_1 removed [ 55.599527][ T5271] bond1: (slave team_slave_1): Enslaving as an active interface with a down link [ 55.690403][ T5285] loop4: detected capacity change from 0 to 512 [ 55.696983][ T5285] EXT4-fs: Ignoring removed oldalloc option [ 55.740540][ T5285] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.411: Parent and EA inode have the same ino 15 [ 55.755026][ T5285] EXT4-fs (loop4): Remounting filesystem read-only [ 55.761746][ T5285] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 55.783004][ T5299] loop0: detected capacity change from 0 to 512 [ 55.789488][ T5285] EXT4-fs (loop4): 1 orphan inode deleted [ 55.795635][ T5285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.799297][ T5300] loop2: detected capacity change from 0 to 8192 [ 55.831807][ T5299] EXT4-fs error (device loop0): ext4_get_journal_inode:5809: inode #32: comm syz.0.414: iget: special inode unallocated [ 55.877687][ T5285] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 55.886704][ T5308] loop6: detected capacity change from 0 to 164 [ 55.897292][ T5299] EXT4-fs (loop0): Remounting filesystem read-only [ 55.903910][ T5299] EXT4-fs (loop0): no journal found [ 55.909176][ T5299] EXT4-fs (loop0): can't get journal size [ 55.919769][ T5308] Unable to read rock-ridge attributes [ 55.927303][ T5308] Unable to read rock-ridge attributes [ 55.935090][ T5285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.950098][ T5299] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 56.007278][ T5299] EXT4-fs (loop0): failed to initialize system zone (-117) [ 56.045452][ T5299] EXT4-fs (loop0): mount failed [ 56.132751][ T5316] tmpfs: Unknown parameter '(Èr' [ 56.148692][ T5322] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 56.263417][ T5335] loop4: detected capacity change from 0 to 164 [ 56.292735][ T5338] loop6: detected capacity change from 0 to 2048 [ 56.295897][ T5340] loop7: detected capacity change from 0 to 512 [ 56.307550][ T5335] Unable to read rock-ridge attributes [ 56.313516][ T5338] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.318368][ T5335] Unable to read rock-ridge attributes [ 56.320106][ T5338] EXT4-fs: Ignoring removed i_version option [ 56.333714][ T5340] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #15: comm syz.7.431: casefold flag without casefold feature [ 56.371260][ T5340] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.431: couldn't read orphan inode 15 (err -117) [ 56.397809][ T5340] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.425087][ T5352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.434239][ T5352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.442630][ T5351] 9pnet_fd: Insufficient options for proto=fd [ 56.514276][ T5355] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 56.546583][ T5360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58624 sclass=netlink_route_socket pid=5360 comm=syz.0.435 [ 56.567662][ T5338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.633391][ T4549] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.680814][ T4812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.722567][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 56.722585][ T29] audit: type=1400 audit(1735902391.131:1035): avc: denied { cmd } for pid=5375 comm="syz.2.444" path="socket:[9846]" dev="sockfs" ino=9846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.777036][ T5381] loop6: detected capacity change from 0 to 164 [ 56.777798][ T29] audit: type=1400 audit(1735902391.181:1036): avc: denied { bind } for pid=5372 comm="syz.7.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.803862][ T5381] Unable to read rock-ridge attributes [ 56.823388][ T5381] Unable to read rock-ridge attributes [ 56.857634][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.7.447'. [ 56.890480][ T5396] tmpfs: Unknown parameter '(Èr' [ 56.937528][ T5402] syz.7.450[5402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.938634][ T5400] tmpfs: Unknown parameter '(Èr' [ 57.023559][ T5411] loop4: detected capacity change from 0 to 512 [ 57.045649][ T5415] loop6: detected capacity change from 0 to 128 [ 57.107714][ T29] audit: type=1400 audit(1735902391.511:1037): avc: denied { listen } for pid=5425 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.173408][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 57.186369][ T29] audit: type=1400 audit(1735902391.551:1038): avc: denied { accept } for pid=5425 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.257794][ T5427] loop2: detected capacity change from 0 to 8192 [ 57.315389][ T5427] syz.2.458: attempt to access beyond end of device [ 57.315389][ T5427] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 57.371567][ T5427] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 57.379535][ T5427] FAT-fs (loop2): Filesystem has been set read-only [ 57.386412][ T5431] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.393621][ T5431] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.421976][ T5427] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 57.449716][ T5427] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 57.490335][ T5431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.502729][ T5431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.539878][ T5431] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.548906][ T5431] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.558007][ T5431] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.566915][ T5431] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.667833][ T29] audit: type=1326 audit(1735902392.071:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553225d29 code=0x7ffc0000 [ 57.691275][ T29] audit: type=1326 audit(1735902392.071:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553225d29 code=0x7ffc0000 [ 57.697363][ T5455] loop6: detected capacity change from 0 to 8192 [ 57.714733][ T29] audit: type=1326 audit(1735902392.071:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f7553225d29 code=0x7ffc0000 [ 57.714761][ T29] audit: type=1326 audit(1735902392.071:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553225d29 code=0x7ffc0000 [ 57.734528][ T5465] loop0: detected capacity change from 0 to 128 [ 57.744434][ T29] audit: type=1326 audit(1735902392.071:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553225d29 code=0x7ffc0000 [ 57.744467][ T29] audit: type=1326 audit(1735902392.071:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553225d29 code=0x7ffc0000 [ 57.842216][ T5455] loop6: p1 < > p2 p3 < p5 > [ 57.846937][ T5455] loop6: partition table partially beyond EOD, truncated [ 57.854335][ T5455] loop6: p1 start 277767 is beyond EOD, truncated [ 57.860833][ T5455] loop6: p2 start 6684676 is beyond EOD, truncated [ 57.873336][ T5455] loop6: p5 start 6684676 is beyond EOD, truncated [ 57.890768][ T5474] 9pnet_fd: Insufficient options for proto=fd [ 58.004230][ T5485] __nla_validate_parse: 2 callbacks suppressed [ 58.004245][ T5485] netlink: 60 bytes leftover after parsing attributes in process `syz.6.477'. [ 58.023823][ T5485] netlink: 60 bytes leftover after parsing attributes in process `syz.6.477'. [ 58.069598][ T5493] netlink: 44 bytes leftover after parsing attributes in process `syz.7.483'. [ 58.073973][ T5485] netlink: 60 bytes leftover after parsing attributes in process `syz.6.477'. [ 58.087641][ T5485] netlink: 60 bytes leftover after parsing attributes in process `syz.6.477'. [ 58.126012][ T5504] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 58.140103][ T5493] loop7: detected capacity change from 0 to 1024 [ 58.170110][ T5493] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 58.174056][ T5485] netlink: 60 bytes leftover after parsing attributes in process `syz.6.477'. [ 58.186252][ T5493] JBD2: no valid journal superblock found [ 58.195154][ T5493] EXT4-fs (loop7): Could not load journal inode [ 58.200335][ T5485] netlink: 60 bytes leftover after parsing attributes in process `syz.6.477'. [ 58.271006][ T5507] netlink: 'syz.0.487': attribute type 10 has an invalid length. [ 58.475262][ T5538] netlink: 'syz.2.499': attribute type 13 has an invalid length. [ 58.507233][ T5539] 9pnet_fd: Insufficient options for proto=fd [ 58.515333][ T5538] gretap0: refused to change device tx_queue_len [ 58.521831][ T5538] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 58.532763][ T5541] loop4: detected capacity change from 0 to 512 [ 58.563747][ T5539] lo speed is unknown, defaulting to 1000 [ 58.608040][ T5543] tmpfs: Unknown parameter '(Èr' [ 58.686167][ T5547] loop7: detected capacity change from 0 to 128 [ 58.778165][ T5547] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.787670][ T5551] 9pnet_fd: Insufficient options for proto=fd [ 58.813469][ T5553] loop2: detected capacity change from 0 to 164 [ 58.815907][ T5550] loop4: detected capacity change from 0 to 2048 [ 58.821391][ T5553] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 58.838251][ T5550] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.844719][ T5550] EXT4-fs: Ignoring removed i_version option [ 58.876731][ T5550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.013895][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.122595][ T5576] loop4: detected capacity change from 0 to 164 [ 59.201695][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 59.216784][ T5576] Unsupported NM flag settings (8) [ 59.298448][ T5581] tmpfs: Unknown parameter '(Èr' [ 59.336048][ T5585] bpf_get_probe_write_proto: 2 callbacks suppressed [ 59.336068][ T5585] syz.4.515[5585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.347568][ T5585] syz.4.515[5585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.363561][ T5585] syz.4.515[5585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.373140][ T5588] loop0: detected capacity change from 0 to 512 [ 59.394567][ T5585] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 59.404965][ T5589] 9pnet_fd: Insufficient options for proto=fd [ 59.418699][ T5588] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.517: invalid indirect mapped block 256 (level 2) [ 59.440416][ T5588] EXT4-fs (loop0): 2 truncates cleaned up [ 59.528471][ T5594] netlink: 76 bytes leftover after parsing attributes in process `syz.6.519'. [ 59.545507][ T5588] netlink: 'syz.0.517': attribute type 12 has an invalid length. [ 59.621109][ T5603] netlink: 256 bytes leftover after parsing attributes in process `syz.4.521'. [ 59.778622][ T5613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.786367][ T5613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.807525][ T5609] loop0: detected capacity change from 0 to 4096 [ 59.981558][ T5619] tipc: Started in network mode [ 59.986464][ T5619] tipc: Node identity , cluster identity 4711 [ 59.992612][ T5619] tipc: Failed to obtain node identity [ 59.998125][ T5619] tipc: Enabling of bearer rejected, failed to enable media [ 60.160334][ T5627] 9pnet_fd: Insufficient options for proto=fd [ 60.248400][ T5630] Cannot find add_set index 0 as target [ 60.587074][ T5643] loop0: detected capacity change from 0 to 164 [ 60.616024][ T5645] 9pnet_fd: Insufficient options for proto=fd [ 60.637111][ T5639] loop6: detected capacity change from 0 to 2048 [ 60.649626][ T5643] Unable to read rock-ridge attributes [ 60.658767][ T5643] Unable to read rock-ridge attributes [ 60.675154][ T5639] EXT4-fs: Ignoring removed bh option [ 60.686930][ T5639] EXT4-fs (loop6): can't disable delalloc during remount [ 60.695455][ T5653] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 60.697775][ T5652] loop2: detected capacity change from 0 to 512 [ 60.746238][ T4549] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 60.768478][ T5652] EXT4-fs (loop2): too many log groups per flexible block group [ 60.776262][ T5652] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 60.783433][ T5652] EXT4-fs (loop2): mount failed [ 60.906293][ T5662] loop6: detected capacity change from 0 to 764 [ 61.102352][ T5676] 9pnet_fd: Insufficient options for proto=fd [ 61.120796][ T5678] loop2: detected capacity change from 0 to 128 [ 61.135131][ T5682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=5682 comm=syz.7.551 [ 61.216565][ T5689] 9pnet_virtio: no channels available for device [ 61.223384][ T5678] syz.2.550: attempt to access beyond end of device [ 61.223384][ T5678] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 61.227360][ T5689] vlan2: entered promiscuous mode [ 61.302975][ T5695] loop7: detected capacity change from 0 to 512 [ 61.440162][ T5697] wireguard0: entered promiscuous mode [ 61.445699][ T5697] wireguard0: entered allmulticast mode [ 61.569841][ T5703] loop2: detected capacity change from 0 to 512 [ 61.601218][ T5703] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.557: casefold flag without casefold feature [ 61.686857][ T5703] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.557: couldn't read orphan inode 15 (err -117) [ 61.831285][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 61.831303][ T29] audit: type=1326 audit(1735906491.242:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0a225d29 code=0x7ffc0000 [ 61.919653][ T29] audit: type=1326 audit(1735906491.242:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdd0a225d29 code=0x7ffc0000 [ 61.943202][ T29] audit: type=1326 audit(1735906491.242:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0a225d29 code=0x7ffc0000 [ 61.966620][ T29] audit: type=1326 audit(1735906491.242:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0a225d29 code=0x7ffc0000 [ 61.990013][ T29] audit: type=1326 audit(1735906491.242:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd0a225d29 code=0x7ffc0000 [ 62.013457][ T29] audit: type=1326 audit(1735906491.242:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0a225d29 code=0x7ffc0000 [ 62.036819][ T29] audit: type=1326 audit(1735906491.242:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0a225d29 code=0x7ffc0000 [ 62.060239][ T29] audit: type=1326 audit(1735906491.242:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdd0a225d29 code=0x7ffc0000 [ 62.083648][ T29] audit: type=1326 audit(1735906491.252:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0a225d29 code=0x7ffc0000 [ 62.092341][ T5729] loop4: detected capacity change from 0 to 512 [ 62.107039][ T29] audit: type=1326 audit(1735906491.252:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5717 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fdd0a225d29 code=0x7ffc0000 [ 62.138800][ T5729] EXT4-fs (loop4): unsupported inode size: 1 [ 62.144870][ T5729] EXT4-fs (loop4): blocksize: 4096 [ 62.187503][ T5739] loop6: detected capacity change from 0 to 512 [ 62.200607][ T5737] loop2: detected capacity change from 0 to 512 [ 62.208433][ T5725] random: crng reseeded on system resumption [ 62.381000][ T5737] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.394676][ T5739] EXT4-fs (loop6): 1 orphan inode deleted [ 62.402832][ T5739] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.511270][ T4959] EXT4-fs error (device loop6): ext4_release_dquot:6961: comm kworker/u8:64: Failed to release dquot type 1 [ 62.550199][ T5757] xt_TCPMSS: Only works on TCP SYN packets [ 62.597662][ T5764] xt_TPROXY: Can be used only with -p tcp or -p udp [ 62.624826][ T5766] loop2: detected capacity change from 0 to 2048 [ 62.631678][ T5766] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.638168][ T5766] EXT4-fs: Ignoring removed i_version option [ 62.679793][ T5768] loop7: detected capacity change from 0 to 8192 [ 62.783426][ T5777] xt_hashlimit: max too large, truncated to 1048576 [ 62.815823][ T5780] 9pnet_fd: Insufficient options for proto=fd [ 62.847849][ T5783] syz.4.586[5783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.847970][ T5783] syz.4.586[5783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.859881][ T5782] syz.4.586[5782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.877277][ T5782] syz.4.586[5782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.893436][ T5792] loop2: detected capacity change from 0 to 512 [ 62.922010][ T5783] syz.4.586[5783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.922277][ T5783] syz.4.586[5783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.965769][ T5792] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.965884][ T5802] Cannot find del_set index 0 as target [ 63.149542][ T5814] xt_TPROXY: Can be used only with -p tcp or -p udp [ 63.814555][ T5829] netlink: 'syz.6.604': attribute type 21 has an invalid length. [ 63.822373][ T5829] netlink: 'syz.6.604': attribute type 30 has an invalid length. [ 63.845400][ T5831] netlink: 'syz.4.605': attribute type 3 has an invalid length. [ 63.853185][ T5831] netlink: 'syz.4.605': attribute type 3 has an invalid length. [ 63.875926][ T5831] __nla_validate_parse: 7 callbacks suppressed [ 63.875945][ T5831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.605'. [ 63.899946][ T5833] loop6: detected capacity change from 0 to 128 [ 64.009230][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.009557][ T5848] syz.6.606: attempt to access beyond end of device [ 64.009557][ T5848] loop6: rw=2049, sector=145, nr_sectors = 296 limit=128 [ 64.021691][ T5849] loop7: detected capacity change from 0 to 512 [ 64.055845][ T5844] SELinux: failed to load policy [ 64.067564][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.088169][ T5844] SELinux: failed to load policy [ 64.094738][ T5849] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 64.111941][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.123872][ T5849] EXT4-fs (loop7): orphan cleanup on readonly fs [ 64.140917][ T5844] SELinux: failed to load policy [ 64.145968][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.155246][ T5844] SELinux: failed to load policy [ 64.160442][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.160864][ T5849] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.193532][ T5844] SELinux: failed to load policy [ 64.211617][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.223634][ T5849] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 64.234009][ T5849] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.611: bg 0: block 40: padding at end of block bitmap is not set [ 64.268024][ T5844] SELinux: failed to load policy [ 64.279292][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.290174][ T5849] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 64.310770][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 64.312237][ T5844] SELinux: failed to load policy [ 64.332438][ T5849] EXT4-fs (loop7): 1 truncate cleaned up [ 64.335185][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.357418][ T5844] SELinux: failed to load policy [ 64.367616][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.377669][ T5862] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 64.391948][ T5844] SELinux: failed to load policy [ 64.396989][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.416829][ T5844] SELinux: failed to load policy [ 64.433679][ T5866] loop7: detected capacity change from 0 to 512 [ 64.450789][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.469467][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.496728][ T5866] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #15: comm syz.7.620: casefold flag without casefold feature [ 64.510699][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.525133][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.621'. [ 64.549729][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.559035][ T5866] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.620: couldn't read orphan inode 15 (err -117) [ 64.574998][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.610694][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.645766][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.680498][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.712786][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.736386][ T5870] team0 (unregistering): Port device team_slave_0 removed [ 64.748334][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.767175][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.786515][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.810353][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.828322][ T5844] SELinux: policydb string length -799535096 does not match expected length 8 [ 64.835364][ T5870] team0 (unregistering): Port device team_slave_1 removed [ 64.947913][ T5888] netlink: 'syz.7.627': attribute type 13 has an invalid length. [ 64.956752][ T5888] gretap0: refused to change device tx_queue_len [ 64.963241][ T5888] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 64.992686][ T5893] netlink: 'syz.4.629': attribute type 10 has an invalid length. [ 65.182714][ T5904] loop0: detected capacity change from 0 to 1024 [ 65.550038][ T5931] futex_wake_op: syz.7.642 tries to shift op by -1; fix this program [ 65.620420][ T5931] 9pnet_fd: Insufficient options for proto=fd [ 65.638988][ T5943] loop0: detected capacity change from 0 to 512 [ 65.750481][ T5952] loop0: detected capacity change from 0 to 2048 [ 65.813493][ T5949] ebtables: ebtables: counters copy to user failed while replacing table [ 65.813797][ T5958] syz.4.652[5958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.842506][ T5958] syz.4.652[5958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.926509][ T5970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.656'. [ 66.001190][ T5971] bridge0: port 3(vlan2) entered blocking state [ 66.007555][ T5971] bridge0: port 3(vlan2) entered disabled state [ 66.030602][ T5971] vlan2: entered allmulticast mode [ 66.040014][ T5971] vlan2: left allmulticast mode [ 66.074888][ T5970] vlan2: entered promiscuous mode [ 66.080041][ T5970] gretap0: entered promiscuous mode [ 66.185604][ T5988] ip6tnl1: entered promiscuous mode [ 66.190959][ T5988] ip6tnl1: entered allmulticast mode [ 66.232259][ T5992] loop6: detected capacity change from 0 to 512 [ 66.271588][ T5992] EXT4-fs (loop6): 1 orphan inode deleted [ 66.286861][ T5992] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.314973][ T4959] EXT4-fs error (device loop6): ext4_release_dquot:6961: comm kworker/u8:64: Failed to release dquot type 1 [ 66.452757][ T6009] ebtables: ebtables: counters copy to user failed while replacing table [ 66.527470][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 66.630724][ T6023] loop6: detected capacity change from 0 to 128 [ 66.677470][ T6030] loop2: detected capacity change from 0 to 2048 [ 66.684765][ T6030] EXT4-fs: Ignoring removed i_version option [ 66.693394][ T6031] loop0: detected capacity change from 0 to 1024 [ 66.704772][ T6023] syz.6.676: attempt to access beyond end of device [ 66.704772][ T6023] loop6: rw=0, sector=121, nr_sectors = 920 limit=128 [ 66.735486][ T4959] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.751118][ T4959] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 66.763437][ T4959] EXT4-fs (loop2): This should not happen!! Data will be lost [ 66.763437][ T4959] [ 66.773172][ T4959] EXT4-fs (loop2): Total free blocks count 0 [ 66.779184][ T4959] EXT4-fs (loop2): Free/Dirty block details [ 66.785142][ T4959] EXT4-fs (loop2): free_blocks=2415919104 [ 66.791001][ T4959] EXT4-fs (loop2): dirty_blocks=32 [ 66.796128][ T4959] EXT4-fs (loop2): Block reservation details [ 66.802218][ T4959] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 66.808665][ T6036] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 66.815394][ T6036] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 66.823034][ T6036] vhci_hcd vhci_hcd.0: Device attached [ 66.838349][ T4915] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 66.850960][ T4915] EXT4-fs (loop2): This should not happen!! Data will be lost [ 66.850960][ T4915] [ 66.857387][ T6040] netlink: 744 bytes leftover after parsing attributes in process `syz.4.681'. [ 66.869689][ T6040] netlink: 744 bytes leftover after parsing attributes in process `syz.4.681'. [ 66.912816][ T29] kauditd_printk_skb: 475 callbacks suppressed [ 66.912831][ T29] audit: type=1400 audit(1735906496.321:1802): avc: denied { listen } for pid=6041 comm="syz.2.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 66.942903][ T6042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6042 comm=syz.2.680 [ 66.979193][ T6044] hub 2-0:1.0: USB hub found [ 66.991504][ T6044] hub 2-0:1.0: 8 ports detected [ 67.056142][ T6044] wireguard0: entered promiscuous mode [ 67.061720][ T6044] wireguard0: entered allmulticast mode [ 67.083015][ T6031] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 67.104584][ T29] audit: type=1400 audit(1735906496.511:1803): avc: denied { read } for pid=6043 comm="syz.6.682" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 67.115052][ T6031] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 67.128719][ T29] audit: type=1400 audit(1735906496.511:1804): avc: denied { open } for pid=6043 comm="syz.6.682" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 67.129195][ T8] usb 1-1: new high-speed USB device number 2 using vhci_hcd [ 67.141279][ T6031] EXT4-fs (loop0): This should not happen!! Data will be lost [ 67.141279][ T6031] [ 67.183068][ T6031] EXT4-fs (loop0): Total free blocks count 0 [ 67.189135][ T6031] EXT4-fs (loop0): Free/Dirty block details [ 67.195039][ T6031] EXT4-fs (loop0): free_blocks=68451041280 [ 67.200933][ T6031] EXT4-fs (loop0): dirty_blocks=16 [ 67.206059][ T6031] EXT4-fs (loop0): Block reservation details [ 67.212090][ T6031] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 67.384690][ T6037] vhci_hcd: connection reset by peer [ 67.394150][ T4959] vhci_hcd: stop threads [ 67.394161][ T4959] vhci_hcd: release socket [ 67.394185][ T4959] vhci_hcd: disconnect device [ 67.455636][ T29] audit: type=1326 audit(1735906496.861:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.7.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1ef45d29 code=0x7ffc0000 [ 67.479011][ T29] audit: type=1326 audit(1735906496.861:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.7.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1ef45d29 code=0x7ffc0000 [ 67.489598][ T6067] loop4: detected capacity change from 0 to 1764 [ 67.534561][ T6068] loop7: detected capacity change from 0 to 1024 [ 67.555626][ T6064] sch_tbf: peakrate 8 is lower than or equals to rate 2097293 ! [ 67.567986][ T29] audit: type=1326 audit(1735906496.911:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.7.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbd1ef45d29 code=0x7ffc0000 [ 67.585173][ T6068] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 67.591392][ T29] audit: type=1326 audit(1735906496.931:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.7.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1ef45d29 code=0x7ffc0000 [ 67.608583][ T6067] iso9660: Unknown parameter 'èÿ¤ÂFí' [ 67.623458][ T29] audit: type=1326 audit(1735906496.931:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.7.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1ef45d29 code=0x7ffc0000 [ 67.623508][ T29] audit: type=1326 audit(1735906496.941:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.7.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbd1ef45d29 code=0x7ffc0000 [ 67.673211][ T6068] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 67.675477][ T29] audit: type=1326 audit(1735906496.941:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.7.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1ef45d29 code=0x7ffc0000 [ 67.690290][ T6068] EXT4-fs (loop7): mount failed [ 67.806840][ T6064] 9p: Unknown Cache mode or invalid value f [ 67.823217][ T6074] loop7: detected capacity change from 0 to 2048 [ 67.844924][ T6074] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.851451][ T6074] EXT4-fs: Ignoring removed i_version option [ 67.882140][ T6074] EXT4-fs mount: 27 callbacks suppressed [ 67.882159][ T6074] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.965458][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.083678][ T6081] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 68.128709][ T4812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.190886][ T6080] loop6: detected capacity change from 0 to 512 [ 68.197402][ T6080] EXT4-fs: Ignoring removed i_version option [ 68.203515][ T6080] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.218111][ T6080] journal_path: Lookup failure for './file0/bus' [ 68.224488][ T6080] EXT4-fs: error: could not find journal device path [ 68.252333][ T6085] loop7: detected capacity change from 0 to 512 [ 68.352702][ T6085] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.695: corrupted in-inode xattr: invalid ea_ino [ 68.371518][ T6085] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.695: couldn't read orphan inode 15 (err -117) [ 68.383859][ T6085] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.401072][ T6093] dns_resolver: Unsupported server list version (0) [ 68.462736][ T6085] mmap: syz.7.695 (6085) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.509092][ T6095] loop0: detected capacity change from 0 to 512 [ 68.548209][ T6095] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.700: casefold flag without casefold feature [ 68.593920][ T6095] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.700: couldn't read orphan inode 15 (err -117) [ 68.624290][ T4812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.655077][ T6095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.791118][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.514547][ T6108] vlan3: entered allmulticast mode [ 69.525186][ T6106] loop4: detected capacity change from 0 to 2048 [ 69.566177][ T6106] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.572706][ T6106] EXT4-fs: Ignoring removed i_version option [ 69.593294][ T6112] syzkaller0: entered allmulticast mode [ 69.608843][ T6112] syzkaller0 (unregistering): left allmulticast mode [ 69.646624][ T6119] syz.0.710[6119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.646698][ T6119] syz.0.710[6119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.662400][ T6118] syz.0.710[6118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.674608][ T6106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.698349][ T6118] syz.0.710[6118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.698444][ T6118] syz.0.710[6118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.714878][ T6119] syz.0.710[6119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.750337][ T6126] netlink: 'syz.2.711': attribute type 4 has an invalid length. [ 69.777051][ T6112] loop6: detected capacity change from 0 to 512 [ 69.802792][ T6112] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec01c, mo2=0002] [ 69.812772][ T6130] bond1: entered promiscuous mode [ 69.817842][ T6130] bond1: entered allmulticast mode [ 69.823294][ T6112] System zones: 0-2, 18-18, 34-34 [ 69.829153][ T6112] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.708: bg 0: block 248: padding at end of block bitmap is not set [ 69.843513][ T6130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.845641][ T6112] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.708: Failed to acquire dquot type 1 [ 69.863216][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.864481][ T6130] bond1 (unregistering): Released all slaves [ 69.873437][ T6112] EXT4-fs (loop6): 1 truncate cleaned up [ 69.884570][ T6112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.933290][ T6112] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.002677][ T6150] loop4: detected capacity change from 0 to 128 [ 70.018199][ T6153] loop0: detected capacity change from 0 to 164 [ 70.024867][ T6153] iso9660: Bad value for 'block' [ 70.148008][ T4549] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.197351][ T6167] xt_TPROXY: Can be used only with -p tcp or -p udp [ 70.469903][ T6182] dummy0: entered promiscuous mode [ 70.476704][ T6182] dummy0: left promiscuous mode [ 70.620738][ T6185] xt_NFQUEUE: number of total queues is 0 [ 70.659693][ T6193] netlink: 'syz.6.736': attribute type 29 has an invalid length. [ 70.676942][ T6193] netlink: 'syz.6.736': attribute type 29 has an invalid length. [ 70.685379][ T6193] netlink: 516 bytes leftover after parsing attributes in process `syz.6.736'. [ 70.694453][ T6193] unsupported nla_type 40 [ 70.700377][ T6195] syzkaller0: entered allmulticast mode [ 70.707346][ T6195] syzkaller0 (unregistering): left allmulticast mode [ 70.708539][ T6193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.724236][ T6193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.802486][ T6197] loop7: detected capacity change from 0 to 1024 [ 70.810809][ T6197] EXT4-fs: Ignoring removed bh option [ 70.820857][ T6197] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.833984][ T6197] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.850026][ T6197] wg2: entered promiscuous mode [ 70.854946][ T6197] wg2: entered allmulticast mode [ 70.908112][ T4812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.992641][ T6212] loop4: detected capacity change from 0 to 2048 [ 70.999553][ T6212] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.006029][ T6212] EXT4-fs: Ignoring removed i_version option [ 71.053903][ T6212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.135270][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.182720][ T6221] netlink: 100 bytes leftover after parsing attributes in process `syz.0.746'. [ 71.186515][ T6228] 9pnet: Could not find request transport: fd0x0000000000000004 [ 71.202350][ T6232] FAULT_INJECTION: forcing a failure. [ 71.202350][ T6232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.215668][ T6232] CPU: 0 UID: 0 PID: 6232 Comm: syz.7.750 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 71.226287][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.236428][ T6232] Call Trace: [ 71.239717][ T6232] [ 71.242659][ T6232] dump_stack_lvl+0xf2/0x150 [ 71.247316][ T6232] dump_stack+0x15/0x1a [ 71.251564][ T6232] should_fail_ex+0x223/0x230 [ 71.256273][ T6232] should_fail+0xb/0x10 [ 71.260584][ T6232] should_fail_usercopy+0x1a/0x20 [ 71.265689][ T6232] _copy_from_user+0x1e/0xb0 [ 71.270303][ T6232] kvmemdup_bpfptr_noprof+0x7d/0xf0 [ 71.275555][ T6232] map_update_elem+0x195/0x470 [ 71.280346][ T6232] __sys_bpf+0x713/0x7a0 [ 71.284647][ T6232] __x64_sys_bpf+0x43/0x50 [ 71.289158][ T6232] x64_sys_call+0x2914/0x2dc0 [ 71.293848][ T6232] do_syscall_64+0xc9/0x1c0 [ 71.298371][ T6232] ? clear_bhb_loop+0x55/0xb0 [ 71.303145][ T6232] ? clear_bhb_loop+0x55/0xb0 [ 71.307868][ T6232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.313786][ T6232] RIP: 0033:0x7fbd1ef45d29 [ 71.318227][ T6232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.337854][ T6232] RSP: 002b:00007fbd1d5b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.346316][ T6232] RAX: ffffffffffffffda RBX: 00007fbd1f135fa0 RCX: 00007fbd1ef45d29 [ 71.354327][ T6232] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000002 [ 71.362304][ T6232] RBP: 00007fbd1d5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.370286][ T6232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.378263][ T6232] R13: 0000000000000000 R14: 00007fbd1f135fa0 R15: 00007ffe23e19e78 [ 71.386428][ T6232] [ 71.400056][ T6236] SET target dimension over the limit! [ 71.424167][ T6238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.753'. [ 71.516722][ T6247] bridge0: port 3(vlan2) entered blocking state [ 71.523138][ T6247] bridge0: port 3(vlan2) entered disabled state [ 71.533936][ T6247] vlan2: entered allmulticast mode [ 71.539557][ T6257] 9pnet_fd: Insufficient options for proto=fd [ 71.546288][ T6247] vlan2: left allmulticast mode [ 71.553891][ T6253] netlink: 'syz.6.759': attribute type 29 has an invalid length. [ 71.562576][ T6253] netlink: 'syz.6.759': attribute type 29 has an invalid length. [ 71.571252][ T6253] netlink: 500 bytes leftover after parsing attributes in process `syz.6.759'. [ 71.683514][ T6268] wg2: entered promiscuous mode [ 71.688543][ T6268] wg2: entered allmulticast mode [ 71.706455][ T6273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.743302][ T6280] loop7: detected capacity change from 0 to 512 [ 71.752815][ T6280] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #15: comm syz.7.770: casefold flag without casefold feature [ 71.765717][ T6280] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.770: couldn't read orphan inode 15 (err -117) [ 71.778389][ T6280] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.820266][ T6285] 9pnet_fd: Insufficient options for proto=fd [ 71.859623][ T4812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.887716][ T6291] loop7: detected capacity change from 0 to 512 [ 71.895758][ T6291] EXT4-fs (loop7): orphan cleanup on readonly fs [ 71.904606][ T6291] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.775: bg 0: block 248: padding at end of block bitmap is not set [ 71.919167][ T6291] __quota_error: 242 callbacks suppressed [ 71.919183][ T6291] Quota error (device loop7): write_blk: dquota write failed [ 71.932446][ T6291] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 71.942408][ T6291] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.775: Failed to acquire dquot type 1 [ 71.954375][ T6291] EXT4-fs (loop7): 1 truncate cleaned up [ 71.960664][ T6291] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.974335][ T6291] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 71.989451][ T6291] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 72.002018][ T29] audit: type=1400 audit(2000000000.320:2052): avc: denied { write } for pid=6290 comm="syz.7.775" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.002485][ T6291] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.047827][ T29] audit: type=1400 audit(2000000000.360:2053): avc: denied { sys_module } for pid=6290 comm="syz.7.775" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.071648][ T6291] ip6gre1: entered allmulticast mode [ 72.088203][ T29] audit: type=1400 audit(2000000000.380:2054): avc: denied { create } for pid=6302 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 72.107800][ T29] audit: type=1400 audit(2000000000.380:2055): avc: denied { create } for pid=6302 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.127449][ T29] audit: type=1400 audit(2000000000.380:2056): avc: denied { connect } for pid=6302 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.147104][ T29] audit: type=1400 audit(2000000000.380:2057): avc: denied { create } for pid=6302 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.168313][ T4812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.197203][ T6310] syz.7.781[6310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.197301][ T6310] syz.7.781[6310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.210221][ T6310] syz.7.781[6310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.224036][ T29] audit: type=1400 audit(2000000000.540:2058): avc: denied { setopt } for pid=6307 comm="syz.7.781" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.256122][ T8] vhci_hcd: vhci_device speed not set [ 72.379269][ T6316] 9pnet_fd: Insufficient options for proto=fd [ 72.449496][ T29] audit: type=1400 audit(2000000000.770:2059): avc: denied { create } for pid=6307 comm="syz.7.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 72.514898][ T6322] loop4: detected capacity change from 0 to 2048 [ 72.540224][ T6322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.578697][ T6330] loop7: detected capacity change from 0 to 512 [ 72.618091][ T6330] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.790: corrupted in-inode xattr: invalid ea_ino [ 72.640455][ T6330] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.790: couldn't read orphan inode 15 (err -117) [ 72.680272][ T6330] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.700956][ T6340] netlink: 256 bytes leftover after parsing attributes in process `syz.6.793'. [ 72.714974][ T6342] 9pnet_fd: Insufficient options for proto=fd [ 72.740917][ T4812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.796786][ T6349] lo speed is unknown, defaulting to 1000 [ 72.818170][ T4918] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.841427][ T4918] EXT4-fs (loop4): Remounting filesystem read-only [ 72.848720][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.890757][ T6361] loop4: detected capacity change from 0 to 512 [ 72.910776][ T6355] SELinux: Context system_u:object_r:system_dbusd_var_run_t:s0 is not valid (left unmapped). [ 72.927106][ T6361] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.799: casefold flag without casefold feature [ 72.967722][ T6361] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.799: couldn't read orphan inode 15 (err -117) [ 72.981326][ T6361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.027083][ T6374] xt_connbytes: Forcing CT accounting to be enabled [ 73.033817][ T6374] Cannot find add_set index 0 as target [ 73.137273][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.191065][ T6387] SELinux: syz.7.810 (6387) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 73.199706][ T6389] bond_slave_0: entered promiscuous mode [ 73.210277][ T6389] bond_slave_1: entered promiscuous mode [ 73.217851][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 73.226958][ T6389] vlan2: entered promiscuous mode [ 73.232055][ T6389] bond0: entered promiscuous mode [ 73.239017][ T6389] bond0: left promiscuous mode [ 73.244179][ T6389] bond_slave_0: left promiscuous mode [ 73.249684][ T6389] bond_slave_1: left promiscuous mode [ 73.272022][ T6395] 9pnet: Could not find request transport: fd0x0000000000000004 [ 73.309827][ T6401] loop4: detected capacity change from 0 to 164 [ 73.332684][ T6401] Unable to read rock-ridge attributes [ 73.341251][ T6401] FAULT_INJECTION: forcing a failure. [ 73.341251][ T6401] name failslab, interval 1, probability 0, space 0, times 1 [ 73.354086][ T6401] CPU: 0 UID: 0 PID: 6401 Comm: syz.4.815 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 73.364826][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.374907][ T6401] Call Trace: [ 73.378207][ T6401] [ 73.381153][ T6401] dump_stack_lvl+0xf2/0x150 [ 73.385865][ T6401] dump_stack+0x15/0x1a [ 73.386660][ T6409] netlink: 'syz.0.818': attribute type 10 has an invalid length. [ 73.390142][ T6401] should_fail_ex+0x223/0x230 [ 73.390218][ T6401] should_failslab+0x8f/0xb0 [ 73.390255][ T6401] kmem_cache_alloc_noprof+0x52/0x320 [ 73.398341][ T6409] vlan1: entered allmulticast mode [ 73.402630][ T6401] ? getname_flags+0x81/0x3b0 [ 73.422514][ T6401] getname_flags+0x81/0x3b0 [ 73.427128][ T6401] getname+0x17/0x20 [ 73.431068][ T6401] do_sys_openat2+0x67/0x120 [ 73.435684][ T6401] __x64_sys_open+0xe6/0x110 [ 73.440539][ T6401] x64_sys_call+0x13e1/0x2dc0 [ 73.445330][ T6401] do_syscall_64+0xc9/0x1c0 [ 73.449917][ T6401] ? clear_bhb_loop+0x55/0xb0 [ 73.454615][ T6401] ? clear_bhb_loop+0x55/0xb0 [ 73.459313][ T6401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.465411][ T6401] RIP: 0033:0x7f7553225d29 [ 73.469913][ T6401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.489540][ T6401] RSP: 002b:00007f7551891038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 73.498067][ T6401] RAX: ffffffffffffffda RBX: 00007f7553415fa0 RCX: 00007f7553225d29 [ 73.506105][ T6401] RDX: 0000000000000000 RSI: 000000000002a4c0 RDI: 0000000020000140 [ 73.514172][ T6401] RBP: 00007f7551891090 R08: 0000000000000000 R09: 0000000000000000 [ 73.522150][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.530199][ T6401] R13: 0000000000000000 R14: 00007f7553415fa0 R15: 00007ffc39547cb8 [ 73.538271][ T6401] [ 73.583214][ T6419] ipip0: entered promiscuous mode [ 73.588335][ T6419] ipip0: entered allmulticast mode [ 73.688736][ T6431] loop6: detected capacity change from 0 to 4096 [ 73.710232][ T6431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.798827][ T6446] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 73.807559][ T6446] sel_write_load: 14 callbacks suppressed [ 73.807575][ T6446] SELinux: failed to load policy [ 73.822500][ T6431] 9pnet_fd: Insufficient options for proto=fd [ 73.884237][ T6449] loop4: detected capacity change from 0 to 1024 [ 73.915526][ T6455] support for cryptoloop has been removed. Use dm-crypt instead. [ 74.036992][ T6447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.156580][ T3700] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.192574][ T6465] loop7: detected capacity change from 0 to 512 [ 74.217869][ T6470] loop4: detected capacity change from 0 to 128 [ 74.229953][ T6465] EXT4-fs (loop7): unsupported inode size: 143 [ 74.236165][ T6465] EXT4-fs (loop7): blocksize: 4096 [ 74.261288][ T3700] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.337276][ T6470] syz.4.842: attempt to access beyond end of device [ 74.337276][ T6470] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 74.378756][ T3700] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.410806][ T6471] lo speed is unknown, defaulting to 1000 [ 74.451661][ T6483] 9pnet_fd: Insufficient options for proto=fd [ 74.460237][ T3700] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.621282][ T3700] bridge_slave_1: left allmulticast mode [ 74.626985][ T3700] bridge_slave_1: left promiscuous mode [ 74.632741][ T3700] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.667518][ T3700] bridge_slave_0: left allmulticast mode [ 74.673322][ T3700] bridge_slave_0: left promiscuous mode [ 74.679027][ T3700] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.690347][ T6498] netlink: 328 bytes leftover after parsing attributes in process `syz.0.849'. [ 74.899240][ T6513] 9pnet_fd: Insufficient options for proto=fd [ 74.961548][ T3700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.983532][ T3700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.003843][ T3700] bond0 (unregistering): Released all slaves [ 75.014991][ T6517] syz.7.852[6517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.015120][ T6517] syz.7.852[6517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.026658][ T6517] syz.7.852[6517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.090069][ T6471] chnl_net:caif_netlink_parms(): no params data found [ 75.127277][ T3700] hsr_slave_0: left promiscuous mode [ 75.134738][ T3700] hsr_slave_1: left promiscuous mode [ 75.161049][ T3700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.168555][ T3700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.184665][ T3700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.192353][ T3700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.227749][ T3700] veth1_macvtap: left promiscuous mode [ 75.233369][ T3700] veth0_macvtap: left promiscuous mode [ 75.239040][ T3700] veth1_vlan: left promiscuous mode [ 75.244275][ T3700] veth0_vlan: left promiscuous mode [ 75.287674][ T6539] loop7: detected capacity change from 0 to 512 [ 75.311594][ T6539] EXT4-fs (loop7): too many log groups per flexible block group [ 75.319408][ T6539] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 75.329813][ T6539] EXT4-fs (loop7): mount failed [ 75.359183][ T6538] IPVS: Error connecting to the multicast addr [ 75.389644][ T6545] 9pnet_fd: Insufficient options for proto=fd [ 75.403875][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.411129][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.418880][ T6471] bridge_slave_0: entered allmulticast mode [ 75.425582][ T6471] bridge_slave_0: entered promiscuous mode [ 75.434737][ T6548] loop7: detected capacity change from 0 to 2048 [ 75.441615][ T6548] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.448207][ T6548] EXT4-fs: Ignoring removed i_version option [ 75.452933][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.461300][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.470988][ T6471] bridge_slave_1: entered allmulticast mode [ 75.480539][ T6471] bridge_slave_1: entered promiscuous mode [ 75.494143][ T6548] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.525953][ T6471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.555645][ T6471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.566290][ T4812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.578647][ T6556] netlink: 36 bytes leftover after parsing attributes in process `syz.0.858'. [ 75.591378][ T6556] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 75.613418][ T6471] team0: Port device team_slave_0 added [ 75.630450][ T6471] team0: Port device team_slave_1 added [ 75.746590][ T6556] lo speed is unknown, defaulting to 1000 [ 75.763232][ T6576] loop4: detected capacity change from 0 to 128 [ 75.774629][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.781765][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.808163][ T6471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.809540][ T6576] ext4: Unknown parameter 'obj_type' [ 75.951553][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.958581][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.984543][ T6471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.265033][ T6471] hsr_slave_0: entered promiscuous mode [ 76.278723][ T6471] hsr_slave_1: entered promiscuous mode [ 76.284691][ T6471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.292312][ T6471] Cannot create hsr debugfs directory [ 76.311373][ T6593] tmpfs: Bad value for 'mpol' [ 76.420839][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.869'. [ 76.437105][ T6609] netlink: 64 bytes leftover after parsing attributes in process `syz.4.869'. [ 76.449924][ T6611] netlink: 328 bytes leftover after parsing attributes in process `syz.0.868'. [ 76.487084][ T6471] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 76.495034][ T6609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.869'. [ 76.513094][ T6609] loop4: detected capacity change from 0 to 1024 [ 76.528152][ T6471] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 76.553529][ T6609] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.564026][ T6471] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 76.579320][ T6471] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 76.588280][ T6617] loop7: detected capacity change from 0 to 1024 [ 76.639769][ T6609] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 76.648450][ T6609] EXT4-fs (loop4): orphan cleanup on readonly fs [ 76.655310][ T6609] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 76.665266][ T6609] EXT4-fs (loop4): Remounting filesystem read-only [ 76.669060][ T6471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.671880][ T6609] EXT4-fs (loop4): 1 orphan inode deleted [ 76.683080][ T6471] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.695536][ T6609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 76.711280][ T6617] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.714353][ T6609] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 76.736270][ T4915] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.741463][ T6609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.743364][ T4915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.762087][ T4915] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.769220][ T4915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.835401][ T4812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.869109][ T6471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.915849][ T6640] loop7: detected capacity change from 0 to 512 [ 76.933697][ T6640] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #15: comm syz.7.872: casefold flag without casefold feature [ 76.963114][ T6640] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.872: couldn't read orphan inode 15 (err -117) [ 76.977738][ T6640] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.013855][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 77.013873][ T29] audit: type=1400 audit(2000000005.330:2285): avc: denied { tracepoint } for pid=6651 comm="syz.4.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 77.094768][ T29] audit: type=1400 audit(2000000005.410:2286): avc: denied { create } for pid=6651 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 77.145578][ T6653] 9pnet: Could not find request transport: 0xffffffffffffffff [ 77.155902][ T4812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.212566][ T6471] veth0_vlan: entered promiscuous mode [ 77.230219][ T6471] veth1_vlan: entered promiscuous mode [ 77.262340][ T6674] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 77.285926][ T6471] veth0_macvtap: entered promiscuous mode [ 77.303258][ T6471] veth1_macvtap: entered promiscuous mode [ 77.333824][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.344353][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.354219][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.364711][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.379100][ T29] audit: type=1400 audit(2000000005.650:2287): avc: denied { sys_chroot } for pid=6683 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 77.400510][ T29] audit: type=1400 audit(2000000005.650:2288): avc: denied { setgid } for pid=6683 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 77.410978][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.421459][ T29] audit: type=1400 audit(2000000005.650:2289): avc: denied { setuid } for pid=6683 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 77.449505][ T29] audit: type=1400 audit(2000000005.650:2290): avc: denied { setrlimit } for pid=6683 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 77.487466][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.498134][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.508021][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.518474][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.532939][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.544497][ T6471] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.553335][ T6471] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.562207][ T6471] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.571167][ T6471] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.582848][ T6695] loop4: detected capacity change from 0 to 512 [ 77.590943][ T6695] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 77.600680][ T6695] EXT4-fs (loop4): group descriptors corrupted! [ 77.624106][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 77.633113][ T6696] netlink: 84 bytes leftover after parsing attributes in process `syz.0.882'. [ 77.645872][ T6690] lo speed is unknown, defaulting to 1000 [ 77.658681][ T29] audit: type=1400 audit(2000000005.980:2291): avc: denied { mounton } for pid=6471 comm="syz-executor" path="/root/syzkaller.lcBKbs/syz-tmp" dev="sda1" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 77.698086][ T29] audit: type=1400 audit(2000000006.000:2292): avc: denied { mount } for pid=6471 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.720317][ T29] audit: type=1400 audit(2000000006.000:2293): avc: denied { mount } for pid=6471 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 77.742295][ T29] audit: type=1400 audit(2000000006.000:2294): avc: denied { mounton } for pid=6471 comm="syz-executor" path="/root/syzkaller.lcBKbs/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 77.780417][ T6704] loop7: detected capacity change from 0 to 512 [ 77.862112][ T6704] loop7: detected capacity change from 0 to 2048 [ 77.963295][ T6731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.893'. [ 77.993679][ T6731] vlan2: entered promiscuous mode [ 77.998808][ T6731] gretap0: entered promiscuous mode [ 78.272579][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.901'. [ 78.494681][ T6777] veth0_virt_wifi: entered promiscuous mode [ 78.516665][ T6777] veth0_virt_wifi: left promiscuous mode [ 78.616102][ T6787] loop4: detected capacity change from 0 to 512 [ 78.640177][ T6787] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 78.669639][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.907'. [ 78.942598][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.8.908'. [ 78.949282][ C0] vxcan0: j1939_tp_txtimer: 0xffff888118364800: tx aborted with unknown reason: -2 [ 78.961018][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888118364c00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 78.978536][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888118364800: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 79.099369][ T6807] loop7: detected capacity change from 0 to 512 [ 79.124618][ T6813] netlink: 'syz.4.914': attribute type 13 has an invalid length. [ 79.144111][ T6807] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.158272][ T6807] ext4 filesystem being mounted at /132/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.287656][ T4812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.449775][ T6836] netlink: 'syz.7.921': attribute type 5 has an invalid length. [ 79.463800][ T6841] loop4: detected capacity change from 0 to 512 [ 79.481066][ T6841] EXT4-fs (loop4): too many log groups per flexible block group [ 79.488847][ T6841] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 79.502646][ T6841] EXT4-fs (loop4): mount failed [ 79.596494][ T6858] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 79.712918][ T6876] netlink: zone id is out of range [ 79.718314][ T6876] netlink: zone id is out of range [ 79.723455][ T6876] netlink: del zone limit has 4 unknown bytes [ 79.752833][ T6866] 9pnet_fd: Insufficient options for proto=fd [ 80.187534][ T6884] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 80.249932][ T6892] loop7: detected capacity change from 0 to 128 [ 80.287658][ T6892] syz.7.941: attempt to access beyond end of device [ 80.287658][ T6892] loop7: rw=0, sector=121, nr_sectors = 920 limit=128 [ 80.425332][ T6911] wg2: left promiscuous mode [ 80.430065][ T6911] wg2: left allmulticast mode [ 80.448322][ T6911] ip6gre1: left allmulticast mode [ 80.912713][ T6921] Process accounting resumed [ 80.967712][ T6934] syz.0.959 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 80.986036][ T6937] netlink: 'syz.7.960': attribute type 10 has an invalid length. [ 81.165217][ T6961] loop7: detected capacity change from 0 to 512 [ 81.175648][ T6961] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 81.210856][ T6964] wireguard0: entered promiscuous mode [ 81.216421][ T6964] wireguard0: entered allmulticast mode [ 81.308714][ T6970] IPVS: Error connecting to the multicast addr [ 81.426410][ T6978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.437067][ T6978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.513281][ T6982] loop4: detected capacity change from 0 to 2048 [ 81.554424][ T6983] loop8: detected capacity change from 0 to 256 [ 81.561975][ T6983] FAT-fs (loop8): bogus number of FAT sectors [ 81.568153][ T6983] FAT-fs (loop8): Can't find a valid FAT filesystem [ 81.588694][ T6982] loop4: p1 < > p4 [ 81.629955][ T6982] loop4: p4 size 8388608 extends beyond EOD, truncated [ 81.653560][ T3000] loop4: p1 < > p4 [ 81.658386][ T3000] loop4: p4 size 8388608 extends beyond EOD, truncated [ 81.938453][ T6997] loop4: detected capacity change from 0 to 512 [ 81.984278][ T6965] syz.0.972 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 81.995226][ T6965] CPU: 1 UID: 0 PID: 6965 Comm: syz.0.972 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 82.005844][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.015938][ T6965] Call Trace: [ 82.019234][ T6965] [ 82.022191][ T6965] dump_stack_lvl+0xf2/0x150 [ 82.026984][ T6965] dump_stack+0x15/0x1a [ 82.031222][ T6965] dump_header+0x83/0x2d0 [ 82.035622][ T6965] oom_kill_process+0x341/0x4c0 [ 82.040485][ T6965] out_of_memory+0x9af/0xbe0 [ 82.045104][ T6965] ? css_next_descendant_pre+0x11c/0x140 [ 82.050775][ T6965] mem_cgroup_out_of_memory+0x13e/0x190 [ 82.056372][ T6965] try_charge_memcg+0x508/0x7f0 [ 82.061319][ T6965] charge_memcg+0x50/0xc0 [ 82.065694][ T6965] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 82.071745][ T6965] __read_swap_cache_async+0x236/0x480 [ 82.077316][ T6965] swap_cluster_readahead+0x279/0x3f0 [ 82.082741][ T6965] swapin_readahead+0xe4/0x6f0 [ 82.087521][ T6965] ? __lruvec_stat_mod_folio+0xdb/0x120 [ 82.093141][ T6965] ? swap_cache_get_folio+0x77/0x210 [ 82.098471][ T6965] do_swap_page+0x31b/0x2550 [ 82.103111][ T6965] ? __rcu_read_lock+0x36/0x50 [ 82.107995][ T6965] ? __pfx_default_wake_function+0x10/0x10 [ 82.113893][ T6965] handle_mm_fault+0x8e4/0x2ac0 [ 82.118759][ T6965] exc_page_fault+0x3b9/0x650 [ 82.123455][ T6965] asm_exc_page_fault+0x26/0x30 [ 82.128403][ T6965] RIP: 0033:0x7fdb86d0cb1c [ 82.132841][ T6965] Code: 66 0f 1f 44 00 00 69 3d 96 8b e4 00 e8 03 00 00 48 8d 1d 97 94 31 00 e8 72 91 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 82.152895][ T6965] RSP: 002b:00007fff49a96d50 EFLAGS: 00010206 [ 82.158968][ T6965] RAX: 0000000000000000 RBX: 00007fdb87025fa0 RCX: 0000000000000000 [ 82.166944][ T6965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555de28808 [ 82.174916][ T6965] RBP: 00007fdb87027ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 82.182910][ T6965] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000014063 [ 82.190884][ T6965] R13: 00007fdb87026080 R14: 0000000000000226 R15: ffffffffffffffff [ 82.198953][ T6965] [ 82.202449][ T6965] memory: usage 307200kB, limit 307200kB, failcnt 89 [ 82.209621][ T6965] memory+swap: usage 307508kB, limit 9007199254740988kB, failcnt 0 [ 82.217572][ T6965] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 82.224897][ T6965] Memory cgroup stats for /syz0: [ 82.225524][ T6965] cache 0 [ 82.233445][ T6965] rss 0 [ 82.236286][ T6965] shmem 0 [ 82.239372][ T6965] mapped_file 0 [ 82.242877][ T6965] dirty 0 [ 82.245822][ T6965] writeback 8192 [ 82.249562][ T6965] workingset_refault_anon 45 [ 82.254348][ T6965] workingset_refault_file 128 [ 82.259201][ T6965] swap 315392 [ 82.262498][ T6965] swapcached 16384 [ 82.266288][ T6965] pgpgin 95747 [ 82.269743][ T6965] pgpgout 95743 [ 82.273211][ T6965] pgfault 74882 [ 82.276847][ T6965] pgmajfault 26 [ 82.280358][ T6965] inactive_anon 0 [ 82.284106][ T6965] active_anon 16384 [ 82.284201][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 82.284217][ T29] audit: type=1326 audit(2000004105.594:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553225d29 code=0x7ffc0000 [ 82.287993][ T6965] inactive_file 0 [ 82.318662][ T29] audit: type=1326 audit(2000004105.644:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553225d29 code=0x7ffc0000 [ 82.321042][ T6965] active_file 0 [ 82.348205][ T6965] unevictable 0 [ 82.351676][ T6965] hierarchical_memory_limit 314572800 [ 82.357142][ T6965] hierarchical_memsw_limit 9223372036854771712 [ 82.363338][ T6965] total_cache 0 [ 82.366815][ T6965] total_rss 0 [ 82.370130][ T6965] total_shmem 0 [ 82.373611][ T6965] total_mapped_file 0 [ 82.377614][ T6965] total_dirty 0 [ 82.381182][ T6965] total_writeback 8192 [ 82.385263][ T6965] total_workingset_refault_anon 45 [ 82.390401][ T6965] total_workingset_refault_file 128 [ 82.395759][ T6965] total_swap 315392 [ 82.399629][ T6965] total_swapcached 16384 [ 82.404065][ T6965] total_pgpgin 95747 [ 82.408104][ T6965] total_pgpgout 95743 [ 82.412163][ T6965] total_pgfault 74882 [ 82.416183][ T6965] total_pgmajfault 26 [ 82.420263][ T6965] total_inactive_anon 0 [ 82.424438][ T6965] total_active_anon 16384 [ 82.428794][ T6965] total_inactive_file 0 [ 82.432953][ T6965] total_active_file 0 [ 82.436935][ T6965] total_unevictable 0 [ 82.440941][ T6965] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.972,pid=6965,uid=0 [ 82.455488][ T6965] Memory cgroup out of memory: Killed process 6965 (syz.0.972) total-vm:93516kB, anon-rss:788kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 82.601701][ T29] audit: type=1326 audit(2000004105.924:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.8.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38e375d29 code=0x7ffc0000 [ 82.625119][ T29] audit: type=1326 audit(2000004105.924:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.8.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38e375d29 code=0x7ffc0000 [ 82.648854][ T29] audit: type=1326 audit(2000004105.924:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.8.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa38e375d29 code=0x7ffc0000 [ 82.672099][ T29] audit: type=1326 audit(2000004105.924:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.8.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38e375d29 code=0x7ffc0000 [ 82.685257][ T7009] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=7009 comm=syz.7.992 [ 82.695456][ T29] audit: type=1326 audit(2000004105.924:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.8.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38e375d29 code=0x7ffc0000 [ 82.731298][ T29] audit: type=1326 audit(2000004105.924:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.8.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa38e375d29 code=0x7ffc0000 [ 82.754737][ T29] audit: type=1326 audit(2000004105.924:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.8.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38e375d29 code=0x7ffc0000 [ 82.778177][ T29] audit: type=1326 audit(2000004105.924:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.8.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38e375d29 code=0x7ffc0000 [ 82.804745][ T7011] nfs4: Unknown parameter '' [ 82.873570][ T7015] loop8: detected capacity change from 0 to 2048 [ 82.890200][ T7015] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.896808][ T7015] EXT4-fs: Ignoring removed i_version option [ 82.927611][ T7015] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.965676][ T7015] __nla_validate_parse: 6 callbacks suppressed [ 82.965725][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.8.993'. [ 83.052584][ T6966] syz.0.972 (6966) used greatest stack depth: 6288 bytes left [ 83.093568][ T6471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.572086][ T7052] loop4: detected capacity change from 0 to 512 [ 83.579245][ T7052] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 83.601286][ T7048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.610125][ T7048] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.619035][ T7048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.628140][ T7048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.637780][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1005'. [ 83.647264][ T7048] geneve2: entered promiscuous mode [ 83.649658][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'. [ 83.652607][ T7048] geneve2: entered allmulticast mode [ 83.667716][ T7048] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.676683][ T7048] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.685591][ T7048] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.694651][ T7048] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.714339][ T7056] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1004'. [ 83.723376][ T7056] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 83.781281][ T7071] 9pnet_fd: Insufficient options for proto=fd [ 83.823224][ T7075] loop4: detected capacity change from 0 to 128 [ 83.875427][ T7075] syz.4.1011: attempt to access beyond end of device [ 83.875427][ T7075] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 84.023794][ T7084] lo speed is unknown, defaulting to 1000 [ 84.312457][ T7080] loop7: detected capacity change from 0 to 512 [ 84.393366][ T7090] loop8: detected capacity change from 0 to 512 [ 84.401433][ T7090] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 84.425210][ T7090] EXT4-fs (loop8): 1 truncate cleaned up [ 84.432622][ T7090] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.712084][ T7099] loop4: detected capacity change from 0 to 764 [ 84.774763][ T6471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.941236][ T7118] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 84.955313][ T7120] loop7: detected capacity change from 0 to 512 [ 84.980635][ T7124] loop4: detected capacity change from 0 to 164 [ 84.988446][ T7124] Unable to read rock-ridge attributes [ 84.989759][ T7120] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.007702][ T7120] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.018962][ T7124] Unable to read rock-ridge attributes [ 85.090643][ T4812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.182237][ T7138] uprobe: syz.0.1030:7138 failed to unregister, leaking uprobe [ 85.200051][ T7139] loop4: detected capacity change from 0 to 1024 [ 85.220056][ T7139] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 85.230992][ T7139] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 85.248536][ T7139] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 85.268149][ T7139] EXT4-fs (loop4): invalid journal inode [ 85.273871][ T7139] EXT4-fs (loop4): can't get journal size [ 85.298728][ T7139] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.1032: blocks 2-2 from inode overlap system zone [ 85.301764][ T7137] uprobe: syz.0.1030:7137 failed to unregister, leaking uprobe [ 85.323439][ T7139] EXT4-fs (loop4): failed to initialize system zone (-117) [ 85.330740][ T7139] EXT4-fs (loop4): mount failed [ 85.421567][ T7147] loop7: detected capacity change from 0 to 512 [ 85.437654][ T7147] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 85.499340][ T7147] EXT4-fs (loop7): 1 orphan inode deleted [ 85.505114][ T7147] EXT4-fs (loop7): 1 truncate cleaned up [ 85.515889][ T7147] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.544535][ T7147] EXT4-fs error (device loop7): empty_inline_dir:1850: inode #12: block 7: comm syz.7.1036: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 85.568724][ T7147] EXT4-fs (loop7): Remounting filesystem read-only [ 85.575290][ T7147] EXT4-fs warning (device loop7): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 85.730666][ T4812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.026882][ T7180] lo speed is unknown, defaulting to 1000 [ 86.231671][ T7188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1050'. [ 86.315024][ T7198] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1051'. [ 86.333060][ T7198] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1051'. [ 86.346885][ T7200] 9pnet_fd: Insufficient options for proto=fd [ 86.368006][ T7198] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1051'. [ 86.385170][ T7198] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1051'. [ 86.412870][ T7189] lo speed is unknown, defaulting to 1000 [ 86.440381][ T7198] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1051'. [ 86.620236][ T7210] SELinux: syz.4.1055 (7210) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 86.773233][ T7189] chnl_net:caif_netlink_parms(): no params data found [ 86.889604][ T7223] lo speed is unknown, defaulting to 1000 [ 86.948118][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.955410][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.962697][ T7189] bridge_slave_0: entered allmulticast mode [ 86.969558][ T7189] bridge_slave_0: entered promiscuous mode [ 86.976495][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.983698][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.991197][ T7189] bridge_slave_1: entered allmulticast mode [ 86.997888][ T7189] bridge_slave_1: entered promiscuous mode [ 87.031023][ T7189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.052978][ T7189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.092420][ T7189] team0: Port device team_slave_0 added [ 87.109038][ T7189] team0: Port device team_slave_1 added [ 87.171261][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.178496][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.205740][ T7189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.225180][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.232494][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.258508][ T7189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.307758][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 87.307775][ T29] audit: type=1326 audit(2000004110.624:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.0.1067" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb86e35d29 code=0x0 [ 87.358963][ T7189] hsr_slave_0: entered promiscuous mode [ 87.368522][ T7189] hsr_slave_1: entered promiscuous mode [ 87.378230][ T7189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.388351][ T7189] Cannot create hsr debugfs directory [ 87.469480][ T29] audit: type=1326 audit(2000004110.784:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553225d29 code=0x7ffc0000 [ 87.542512][ T29] audit: type=1326 audit(2000004110.834:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7553225d29 code=0x7ffc0000 [ 87.567420][ T29] audit: type=1326 audit(2000004110.834:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553225d29 code=0x7ffc0000 [ 87.585441][ T7189] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 87.591027][ T29] audit: type=1326 audit(2000004110.834:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553225d29 code=0x7ffc0000 [ 87.591058][ T29] audit: type=1326 audit(2000004110.834:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7553225d29 code=0x7ffc0000 [ 87.644819][ T29] audit: type=1326 audit(2000004110.834:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553225d29 code=0x7ffc0000 [ 87.668249][ T29] audit: type=1326 audit(2000004110.834:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553225d29 code=0x7ffc0000 [ 87.691997][ T29] audit: type=1326 audit(2000004110.834:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7553225d29 code=0x7ffc0000 [ 87.715495][ T29] audit: type=1326 audit(2000004110.834:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.4.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553225d29 code=0x7ffc0000 [ 87.742745][ T7189] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 87.752100][ T7189] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 87.761593][ T7189] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 87.846776][ T7189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.865335][ T7282] serio: Serial port ptm1 [ 87.867739][ T7280] loop8: detected capacity change from 0 to 512 [ 87.881609][ T7189] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.903659][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.911222][ T3700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.919768][ T7280] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 87.937861][ T4918] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.945053][ T4918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.991564][ T7280] __nla_validate_parse: 3 callbacks suppressed [ 87.991582][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1073'. [ 88.117897][ T7301] 9pnet_fd: Insufficient options for proto=fd [ 88.142194][ T7189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.504404][ T7189] veth0_vlan: entered promiscuous mode [ 88.543105][ T7189] veth1_vlan: entered promiscuous mode [ 88.628631][ T7189] veth0_macvtap: entered promiscuous mode [ 88.656746][ T7350] loop7: detected capacity change from 0 to 1024 [ 88.687610][ T7189] veth1_macvtap: entered promiscuous mode [ 88.726983][ T7350] EXT4-fs: Ignoring removed nobh option [ 88.732990][ T7350] EXT4-fs: Ignoring removed oldalloc option [ 88.746597][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.757374][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.767656][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.778230][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.788089][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.798637][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.857241][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.933282][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.944352][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.954317][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.965248][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.975579][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.986328][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.181371][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.203517][ T7189] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.212508][ T7189] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.221327][ T7189] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.230145][ T7189] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.238541][ T7350] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.312810][ T7350] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4115: comm syz.7.1083: Allocating blocks 497-513 which overlap fs metadata [ 89.373463][ T7350] EXT4-fs (loop7): pa ffff8881064822a0: logic 272, phys. 401, len 7 [ 89.382016][ T7350] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 89.395723][ T7379] loop9: detected capacity change from 0 to 512 [ 89.441098][ T7379] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #15: comm syz.9.1049: casefold flag without casefold feature [ 89.480137][ T7379] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.1049: couldn't read orphan inode 15 (err -117) [ 89.500089][ T7379] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.517394][ T4812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.537400][ T7379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7379 comm=syz.9.1049 [ 89.569804][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1086'. [ 89.598263][ T7189] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.630711][ T7390] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1086'. [ 89.696076][ T7390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1086'. [ 89.711791][ T7404] 9pnet_fd: Insufficient options for proto=fd [ 89.711862][ T7403] loop9: detected capacity change from 0 to 512 [ 89.739072][ T7403] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 89.797569][ T7390] loop4: detected capacity change from 0 to 1024 [ 89.808102][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1088'. [ 89.883205][ T7390] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.941145][ T7390] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 89.970235][ T7390] EXT4-fs (loop4): orphan cleanup on readonly fs [ 89.993347][ T7390] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 90.030624][ T7390] EXT4-fs (loop4): Remounting filesystem read-only [ 90.068110][ T7390] EXT4-fs (loop4): 1 orphan inode deleted [ 90.080267][ T7390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 90.133644][ T7390] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 90.146851][ T7390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.233208][ T7433] netlink: 'syz.0.1092': attribute type 10 has an invalid length. [ 90.278142][ T7433] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 90.525893][ T7431] loop4: detected capacity change from 0 to 512 [ 90.564211][ T7431] EXT4-fs (loop4): too many log groups per flexible block group [ 90.573185][ T7431] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 90.660410][ T7431] EXT4-fs (loop4): mount failed [ 90.863782][ T7482] loop4: detected capacity change from 0 to 512 [ 90.892626][ C1] vcan0: j1939_tp_rxtimer: 0xffff888121a01800: rx timeout, send abort [ 90.901170][ C1] vcan0: j1939_tp_rxtimer: 0xffff888121a01a00: rx timeout, send abort [ 90.909694][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888121a01800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 90.924135][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888121a01a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 91.059030][ T7482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.080035][ T7482] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.167145][ T7504] loop8: detected capacity change from 0 to 512 [ 91.175812][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.217401][ T7504] EXT4-fs (loop8): 1 orphan inode deleted [ 91.223993][ T7504] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.247902][ T4919] EXT4-fs error (device loop8): ext4_release_dquot:6961: comm kworker/u8:25: Failed to release dquot type 1 [ 91.266762][ T7504] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.345874][ T6471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.357774][ T7525] loop9: detected capacity change from 0 to 128 [ 91.435610][ T7538] loop8: detected capacity change from 0 to 512 [ 91.449468][ T7538] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 91.516389][ T7525] syz.9.1114: attempt to access beyond end of device [ 91.516389][ T7525] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 91.532205][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1113'. [ 91.781054][ T7554] ip6tnl1: entered promiscuous mode [ 91.786539][ T7554] ip6tnl1: entered allmulticast mode [ 91.819891][ T7557] syz.7.1122[7557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.820142][ T7556] syz.7.1122[7556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.837455][ T7557] syz.7.1122[7557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.844264][ T7556] syz.7.1122[7556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.861509][ T7557] syz.7.1122[7557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.863075][ T7556] syz.7.1122[7556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.935341][ T7559] loop9: detected capacity change from 0 to 256 [ 92.011271][ T7559] FAT-fs (loop9): Directory bread(block 64) failed [ 92.024314][ T7561] loop8: detected capacity change from 0 to 2048 [ 92.031832][ T7559] FAT-fs (loop9): Directory bread(block 65) failed [ 92.043804][ T7559] FAT-fs (loop9): Directory bread(block 66) failed [ 92.051220][ T7559] FAT-fs (loop9): Directory bread(block 67) failed [ 92.062244][ T7559] FAT-fs (loop9): Directory bread(block 68) failed [ 92.071370][ T7559] FAT-fs (loop9): Directory bread(block 69) failed [ 92.080276][ T7559] FAT-fs (loop9): Directory bread(block 70) failed [ 92.087309][ T7559] FAT-fs (loop9): Directory bread(block 71) failed [ 92.093466][ T7568] loop7: detected capacity change from 0 to 512 [ 92.100573][ T7559] FAT-fs (loop9): Directory bread(block 72) failed [ 92.107525][ T7561] loop8: p1 < > p4 [ 92.119075][ T7566] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1125'. [ 92.124886][ T7559] FAT-fs (loop9): Directory bread(block 73) failed [ 92.128916][ T7561] loop8: p4 size 8388608 extends beyond EOD, truncated [ 92.191767][ T7568] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.208299][ T7568] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.301989][ T7588] loop8: detected capacity change from 0 to 128 [ 92.318341][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 92.318375][ T29] audit: type=1326 audit(2000004115.644:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.9.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4fe05d29 code=0x7ffc0000 [ 92.350686][ T29] audit: type=1400 audit(2000004115.644:2721): avc: denied { setattr } for pid=7567 comm="syz.7.1126" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.373341][ T29] audit: type=1326 audit(2000004115.654:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.9.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4fe05d29 code=0x7ffc0000 [ 92.401706][ T7588] syz.8.1131: attempt to access beyond end of device [ 92.401706][ T7588] loop8: rw=0, sector=121, nr_sectors = 920 limit=128 [ 92.431252][ T4812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.519858][ T29] audit: type=1326 audit(2000004115.844:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.9.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4fe05d29 code=0x7ffc0000 [ 92.558091][ T29] audit: type=1326 audit(2000004115.854:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.9.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4fe05d29 code=0x7ffc0000 [ 92.582027][ T29] audit: type=1326 audit(2000004115.854:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.9.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b4fe05d29 code=0x7ffc0000 [ 92.605589][ T29] audit: type=1326 audit(2000004115.854:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.9.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4fe05d29 code=0x7ffc0000 [ 92.629425][ T29] audit: type=1326 audit(2000004115.854:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.9.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b4fe05d29 code=0x7ffc0000 [ 92.653162][ T29] audit: type=1326 audit(2000004115.854:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.9.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4fe05d29 code=0x7ffc0000 [ 92.677590][ T29] audit: type=1326 audit(2000004115.854:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.9.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b4fe05d29 code=0x7ffc0000 [ 92.774803][ T7610] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1137'. [ 92.921564][ T7614] loop7: detected capacity change from 0 to 512 [ 92.982402][ T7614] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.003776][ T7614] ext4 filesystem being mounted at /182/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.171554][ T4812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.259821][ T7639] devpts: called with bogus options [ 93.275280][ T7641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1149'. [ 93.323189][ T7639] loop8: detected capacity change from 0 to 512 [ 93.370109][ T7639] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec01c, mo2=0002] [ 93.380445][ T7639] System zones: 0-2, 18-18, 34-34 [ 93.387885][ T7639] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1147: bg 0: block 248: padding at end of block bitmap is not set [ 93.397337][ T7655] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1154'. [ 93.410937][ T7639] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.1147: Failed to acquire dquot type 1 [ 93.424125][ T7660] 9pnet_fd: Insufficient options for proto=fd [ 93.431326][ T7639] EXT4-fs (loop8): 1 truncate cleaned up [ 93.441579][ T7639] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.454224][ T7639] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.469464][ T7663] loop7: detected capacity change from 0 to 512 [ 93.494795][ T6471] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.504809][ T7663] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.1157: corrupted in-inode xattr: invalid ea_ino [ 93.546076][ T7663] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.1157: couldn't read orphan inode 15 (err -117) [ 93.570536][ T7663] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.604682][ T7674] loop9: detected capacity change from 0 to 512 [ 93.626068][ T7674] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.632590][ T7674] EXT4-fs: Ignoring removed orlov option [ 93.653768][ T4812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.005628][ T7674] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.034558][ T7674] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.120513][ T7694] 9pnet_fd: Insufficient options for proto=fd [ 94.135044][ T7692] ebtables: ebtables: counters copy to user failed while replacing table [ 94.159475][ T7698] loop9: detected capacity change from 0 to 512 [ 94.165898][ T7698] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 94.208097][ T7700] netlink: 268 bytes leftover after parsing attributes in process `syz.7.1172'. [ 94.344143][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.350626][ T7730] 9pnet_fd: Insufficient options for proto=fd [ 94.354189][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.419945][ T7731] vhci_hcd: invalid port number 15 [ 94.425058][ T7731] vhci_hcd: invalid port number 15 [ 94.430682][ T7731] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1178'. [ 94.492145][ T7739] vlan2: entered allmulticast mode [ 94.736342][ T7756] 9pnet_fd: Insufficient options for proto=fd [ 94.776637][ T7758] loop7: detected capacity change from 0 to 512 [ 94.800088][ T7758] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.1196: Failed to acquire dquot type 1 [ 94.812172][ T7758] EXT4-fs (loop7): 1 truncate cleaned up [ 94.818558][ T7758] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.877660][ T7767] loop8: detected capacity change from 0 to 512 [ 94.885944][ T7767] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 94.953426][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1198'. [ 95.030995][ T7787] 9pnet_fd: Insufficient options for proto=fd [ 95.061978][ T7791] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1207'. [ 95.143069][ T7797] loop9: detected capacity change from 0 to 128 [ 95.185440][ T7797] syz.9.1209: attempt to access beyond end of device [ 95.185440][ T7797] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 95.371329][ T7805] xt_hashlimit: max too large, truncated to 1048576 [ 95.405766][ T7807] loop9: detected capacity change from 0 to 1764 [ 95.438717][ T7807] Unknown options in mask 5 [ 95.467107][ T7809] netlink: 'syz.4.1215': attribute type 29 has an invalid length. [ 95.523668][ T3000] ================================================================== [ 95.531791][ T3000] BUG: KCSAN: data-race in __dentry_kill / step_into [ 95.538488][ T3000] [ 95.540820][ T3000] read-write to 0xffff88810661ce40 of 4 bytes by task 4784 on cpu 0: [ 95.548901][ T3000] __dentry_kill+0x22e/0x4c0 [ 95.553509][ T3000] dput+0x5c/0xd0 [ 95.557149][ T3000] do_unlinkat+0x258/0x4d0 [ 95.561585][ T3000] __x64_sys_unlink+0x2e/0x40 [ 95.566298][ T3000] x64_sys_call+0x2329/0x2dc0 [ 95.570986][ T3000] do_syscall_64+0xc9/0x1c0 [ 95.575507][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.581449][ T3000] [ 95.583787][ T3000] read to 0xffff88810661ce40 of 4 bytes by task 3000 on cpu 1: [ 95.591335][ T3000] step_into+0x12f/0x840 [ 95.595587][ T3000] walk_component+0x169/0x230 [ 95.598004][ T7816] 9pnet_fd: Insufficient options for proto=fd [ 95.600280][ T3000] path_lookupat+0x10a/0x2b0 [ 95.610930][ T3000] filename_lookup+0x150/0x340 [ 95.615713][ T3000] do_readlinkat+0x89/0x210 [ 95.620245][ T3000] __x64_sys_readlink+0x47/0x60 [ 95.625104][ T3000] x64_sys_call+0x28ba/0x2dc0 [ 95.629780][ T3000] do_syscall_64+0xc9/0x1c0 [ 95.634287][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.640203][ T3000] [ 95.642527][ T3000] value changed: 0x00600008 -> 0x00008008 [ 95.648245][ T3000] [ 95.650563][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 95.656701][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: udevd Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 95.666935][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 95.676985][ T3000] ================================================================== [ 95.700654][ T7817] loop9: detected capacity change from 0 to 512 [ 95.721084][ T7817] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #15: comm syz.9.1218: casefold flag without casefold feature [ 95.738009][ T7817] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.1218: couldn't read orphan inode 15 (err -117)