last executing test programs: 3.734237679s ago: executing program 3 (id=56): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000002200000000000dd62259e8551d065b7ce2bcc2e03aeb486df941caa06df80ca00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000008000000090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000930a0000040000000010"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x222080, 0x0) write$selinux_access(r6, &(0x7f00000000c0)={'system_u:object_r:fixed_disk_device_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x1ff}, 0x4d) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700}) 3.646630089s ago: executing program 3 (id=59): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x18, 0x3b, 0x9, 0x0, 0x0, {0x1}, [@nested={0x4, 0x4}]}, 0x18}}, 0x0) 3.610201063s ago: executing program 3 (id=61): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='./file0\x00') readlink(&(0x7f0000000640)='./file0\x00', &(0x7f0000001740)=""/4075, 0xfeb) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0xa, 0x3, 0x8) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0xb}, 0x1c) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60a8b4ce00140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="d80000005e0001000000000000000000bd00478091f1507f65750f42a7596840b8043bf031d7a80ddc12236fb1237fe5009eaab6f7448d2823d161ee99395dcaf8855c288fa840c3874a683ab5a56c8a9954b7974ee00b4698d2bac426197d7aefb31a30738da3833e53d24096bdf238db1b0839c0ab23e6a2c39b12ea1364fd5b8c563fd6c9f203437f2296eb12589b55181ff33e355f31b638d784224a326e2bf64c3e7ec48ef774c69113e763b013019440360d9cb8fb48790f348c71f0bda8d7733aecfbd1bffff37fe42200000008001800", @ANYRES32=r6, @ANYBLOB="b29ba8f26c0f638034ef2ef6f6c23b32184e9480b4b03d6d82f47024e7ad39d4205f3098cae4add953ad0daa2eec4903bfda4d"], 0xd8}], 0x1}, 0x0) lseek(0xffffffffffffffff, 0x5, 0x2) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) dup(r9) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) 3.515794414s ago: executing program 3 (id=62): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000000300)=""/171, 0xab}], 0x100001ab, &(0x7f0000001d80), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000400), 0xfc, 0x567, &(0x7f0000001240)="$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") mknod$loop(&(0x7f00000001c0)='./file0/bus\x00', 0x100, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) shutdown(r4, 0x2) 3.306404488s ago: executing program 2 (id=66): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)='usrjquota=', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r5, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0xffffffffffffffea, r5, 0x200, 0x40, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x40008) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x1, 0x0, 0xf7c}, {0x6, 0x0, 0x1}]}, 0x10) r6 = syz_open_pts(0xffffffffffffffff, 0x202280) ioctl$TCXONC(r6, 0x540a, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000200)={0x4, 0x3}) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r1, 0x0, 0x1000}, 0x0, &(0x7f0000000240), &(0x7f0000001640)="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") setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "fd"}, 0x9) pipe2$9p(&(0x7f0000001900), 0x0) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r9 = dup(r8) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast1}, 0x3, 0x4, 0x1, 0x2}}, 0x26) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x768f}}]}, 0x83, 0x5fe, &(0x7f0000001040)="$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") 2.813035035s ago: executing program 4 (id=75): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000000300)=""/171, 0xab}], 0x100001ab, &(0x7f0000001d80), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000400), 0xfc, 0x567, &(0x7f0000001240)="$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") mknod$loop(&(0x7f00000001c0)='./file0/bus\x00', 0x100, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) shutdown(r4, 0x2) 2.526332948s ago: executing program 0 (id=76): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000c80)='./file1\x00', 0x210005, &(0x7f00000002c0)={[{@dax_never}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES64=r5], 0x40}}, 0x0) 2.222112203s ago: executing program 3 (id=77): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) tkill(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000580)={{}, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x7f, 0x8204, 0xfff, 0x3, 0x0}, &(0x7f0000000200)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={r3, 0x100, 0x10}, 0xc) sendto$inet(r1, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="11a461b5", 0x4, 0x14, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@multicast2}]}, @generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x21) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x488000, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000100)={0x8001, 0x3, 0x1, 'queue0\x00', 0xffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r3, @ANYRESOCT=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r6}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.220895323s ago: executing program 2 (id=78): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0xa242, 0x0, 0x0, 0x0, 0x8c, 0xfffffe01}, 0x9c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x4b67, &(0x7f0000000000)) r3 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xc80, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f0000000280)="4f502d5e9c282fea", 0x8}]) socket(0x1f, 0x800, 0x7) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000085000/0x3000)=nil, 0x3000, 0x0, 0x28011, r3, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrusage(0x0, &(0x7f00000006c0)) ftruncate(r6, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000040)=0x57) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) capget(&(0x7f0000000300)={0x19980330, r8}, &(0x7f0000000340)={0x1, 0xa4, 0x3, 0x4, 0x5, 0x1000}) creat(&(0x7f0000000080)='./file0\x00', 0x85) 2.026330976s ago: executing program 0 (id=79): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bba8c07", "f37f20e2ff799aae"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000900)=0x2, 0x4) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xfc94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x10}, 0xc) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000280)={0x0, 0x377, 0x0, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000940)={r2, 0x7, 0x0, [0xfff, 0x24, 0x5, 0x3046, 0xdae], [0x1, 0x4, 0x40, 0xa8, 0x4, 0x2, 0x1, 0x100000000, 0x2, 0xffffffff, 0xa5, 0xffffffffffffffff, 0x6, 0x0, 0x7fffffffffffffff, 0x9c30, 0x2, 0x4, 0x800, 0x800, 0x40, 0x7, 0x7fffffff, 0xff, 0xe, 0xffff, 0x4850, 0x2, 0x5, 0xffffffff, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x100, 0x3, 0x5, 0xfffffffe00000000, 0x7, 0x4, 0x3, 0x7, 0x3, 0x29, 0x3, 0x8, 0x183f, 0x8, 0x7ff, 0x10, 0x5, 0x400, 0x6, 0x5, 0x1, 0x3, 0xc1, 0x341, 0xe9, 0x6, 0xa, 0x7ff, 0x1ff, 0x3000000000000000, 0x6, 0xff, 0x8, 0x5, 0xffffffffffffffff, 0x3, 0x40000000, 0x8000, 0x10000, 0x3, 0x8, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x5, 0x6, 0x8000000000000000, 0x40, 0xdae0, 0x1, 0x101, 0x7, 0x3, 0x9, 0x100, 0x7f, 0x6, 0x3, 0x3, 0x7, 0xb3, 0xfffffffffffffffc, 0x2, 0x0, 0x7, 0x1, 0xd53, 0x6, 0x5, 0x7fffffffffffffff, 0x9, 0x6, 0xaf, 0x5, 0x400, 0x4d0, 0xffffffff, 0x6, 0x7, 0x6d82, 0x3, 0xda7, 0x8000000000000001, 0x10, 0x1, 0x5]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000"], 0x7c}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r4}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r7}, 0x69) shutdown(r0, 0x1) 1.895893331s ago: executing program 2 (id=81): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000a4c000/0xf000)=nil, 0xf000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x62841, 0x0) write$P9_RSTATu(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x58) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000058f846c67f5c44133a097c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x4010e000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.822247029s ago: executing program 0 (id=83): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)='usrjquota=', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0xffffffffffffffea, r3, 0x200, 0x40, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x40008) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) r4 = syz_open_pts(0xffffffffffffffff, 0x202280) ioctl$TCXONC(r4, 0x540a, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000200)={0x4, 0x3}) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "fd"}, 0x9) pipe2$9p(&(0x7f0000001900), 0x0) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r7 = dup(r6) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast1}, 0x3, 0x4, 0x1, 0x2}}, 0x26) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x768f}}]}, 0x83, 0x5fe, &(0x7f0000001040)="$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") 1.693176004s ago: executing program 4 (id=85): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 1.345805344s ago: executing program 1 (id=86): syz_usb_connect$cdc_ecm(0x0, 0x156, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="190000000400000008000000ff7f000000000000", @ANYRES32, @ANYBLOB="0000000000000000010000000000000000000000d2316dbeae8761e371f8f4d3351027671be4a4373b0573a769770db413181a08e2545ced5b4e31a68ed83628ccfb310ce679cc336bd264cfae150d31a4a41cffbb22ed8b65c883b5d5c679de3d46a0c5896c0b362d9b78d478ac88a2d47c9408daa301dd00870e4be5ca13dddf34466a5561667cb304588eab625fb2f9c255a932b60f8c18ea5daa93078c329350ab5adf48027f81c2d652bbb977bdc5b1cc8a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'macvlan1\x00'}}, 0x1e) memfd_create(&(0x7f0000000040)='##3:!}(#)^\'\'&\x00', 0x4) fcntl$dupfd(r6, 0x406, r5) write$binfmt_aout(r6, &(0x7f0000001640)=ANY=[], 0x5ea) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000640)={[{@nojournal_checksum}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@nodiscard}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fsname={'fsname', 0x3d, 'a\\@ !\x8a*'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'kfree\x00'}}]}, 0x1, 0x515, &(0x7f0000001540)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r8}, 0x18) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.285358261s ago: executing program 3 (id=87): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x32) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$eJzs3M9rHFUcAPDvzCb93SbWKrRWjRYx+CNp0qo9eFEUPFQU9FCPcZOW0m0jTQRbio0i9SJIQc/iUfAv8OZF1JPgVe9SKBqEVk+R2Z1JN9vdZNNsdmv384Fp39t5M/O+O+/tvJm3mwD61kj2TxKxKyJ+i4ihWnZlgZHafzcXL5X/WbxUTmJp6a0/k2q5G4uXykXRYrudeWY0jUg/SfKDxNb63c5duHhmqlKZOZ/nx+fPvjc+d+His6fPTp2aOTVzbvLYsaNHJl54fvK5tuJI1lifxXXjwIezB/e/9s7V18snrr7707fZNrvy9fVxdMpIFvhfS1WN657o9MF6bHddOhnoYUVYl1JEZKdrsNr/h6IUt07eULz6cU8rB2yq7Nq0tfXqhSXgHpbE2mX+7kZFgC4rLvTZ/W+xdGnocVe4/lLtBiiL+2a+1NYMRJqXGWy4v+2kkYg4sfDvV9kSm/QcAgCg3mflL4/HM83Gf2k8WFduTz6HMhwR90XE3oi4PyL2RcQDEVnZxiFlW0Ya8rePf9JrdxhaW7Lx34v53NbK8V8x+ovhUp7bXY1/MDl5ujJzOH9PRmNwa5afWOUY37/y6+et1tWP/7IlO34xFszrcW2g4QHd9NT8VHVQ2gHXP4o4MNAs/mR5JiCJiP0RcWB9u95TJE4/9c3B7QebF1o7/lV0YJ5p6euIJ2vnfyEa4i8kq89Pjm+Lyszh8aJV3O7nX6682er4LeLfsvHI2pOd/x0r239jkeGkfr52bv3HuPL7py3vae60/W9J3q6el+KN+mBqfv78RMSW5Hg1v+L1yVvbFvmifBb/6KHm/X9vvk12nIciImvCD0fEIxHxaF73xyLi8Yg4tEr8P76cJ5q01w21/w7I4p9u+vm33P4bzv/6E6UzP3xX7GzbuuPPzv/Ramo0f6X6+beGdiu40fcPAAAA/g/S6nfgk3RsOZ2mY2O17/Dvix1pZXZu/umTs++fm659V344BtPiSddQ3fPQiWQh32MtP5k/Ky7WH8mfG39R2l7Nj5VnK9M9jh363c4W/T/zR6nXtQM2XbN5tMmuTUEBvdTY/9OV2ctvdLMyQFf5vTb0rzX6f9qtegDd5/oP/atZ/7/ckDcXAPcm13/oX/o/9C/9H/qX/g99aSO/65fo50Sklcr0tojVCxd/EOjuqLNE+4lefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xn8BAAD///xQ9VA=") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff27, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f0000003880)=[{0x1, 0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f80)=""/4096, 0x1000}], 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x0, &(0x7f0000003800)=[{0x0}], &(0x7f0000003840)=[0x7]}], 0x3) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 1.146107997s ago: executing program 4 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='ext4_sync_file_exit\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f0000001880)='ext4_sync_file_exit\x00', r3}, 0x10) write$cgroup_pid(r5, &(0x7f0000000980), 0x12) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) listen(r1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) close(r1) 1.128910489s ago: executing program 0 (id=89): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)='usrjquota=', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r5, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0xffffffffffffffea, r5, 0x200, 0x40, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x40008) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x4, 0xfffff00c}, {0x20, 0x1, 0x0, 0xf7c}, {0x6, 0x0, 0x1}]}, 0x10) r6 = syz_open_pts(0xffffffffffffffff, 0x202280) ioctl$TCXONC(r6, 0x540a, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000200)={0x4, 0x3}) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r1}, 0x0, &(0x7f0000000240), 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "fd"}, 0x9) pipe2$9p(&(0x7f0000001900), 0x0) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r9 = dup(r8) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast1}, 0x3, 0x4, 0x1, 0x2}}, 0x26) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x768f}}]}, 0x83, 0x5fe, &(0x7f0000001040)="$eJzs3c9rHNcdAPDvzEqqZKuVXYqpTUsFPdhQrB+uqduebF/qg6GG+lBCDhaW5AivbGHJEDuGyJBDAgmEkGsIvuQfyD2YXHMLgSS3nANOCA45JMEbZnbHXla78kbWaiTP5wO7eu/NaN/76ulp3uzo7QRQWZPZUxpxOCIuJRETbdvGo7lxsrXfw+/uXM4eSTQa//s2iaRVVuz/qPV1f/aURIxGxKdnI35f21jv6q3bV+fqjaZXI6bXllemV2/dPr60PHdl4crCtdkT/zx5auZfsydntyXOIq5z5//7p7dee+kfi5/VjydxOi4OvzIfHXFsl8mYjEetENvLhyLiVJbo8nPZa4oQkpLbwdbUWr+PwxFxKCailueaJmLpzVIbBwxUoxbRACoqMf6hoop5QHFuP4jz4N3swZnmCdDG+Iea743EaH5utO9h0nZm1DzfPbAN9Wd1/HznyHvZI3q8DzG0DfX0sn43Iv7YLf4kb9uB/F2cLP400rbvy9IzETHS+lmkW6x/siO/079/vyb+9n7I4j3d+pqVn91i/WXHD0A13T/TOpCvZ7knx79sZljMf6LL/Ge8y7FrK8o+/vWe/xXH+9H8PfK0Yx6WzXkudH/J4c6Cr944906v+tvnf9kjq7+YC+6EB3cjjnTE/3o+mUse93/Spf+zXS71Wcd/Pv/mXK9tZcffuBdxtOv5z5MrWllqem15pSjruD45vbhUX5hpPnet46NPXvygV/1lx5/1f/SIf7P+z8pW+qzjwwv3lnttG39q/OnXI8nFPDXSKnl5bm3txmzESHK+tUtb+YnN21LsU7xGFv+xv3Yf/5vEn3f0ep/xr/z/6sNe2/ru/w1/VXKPGn22oZcs/vkt9v/bfdbxwws3/9xRNFYkNot/7BljAwAAAAAAgKpJ82uwSTr1OJ2mU1PNNbx/iH1p/frq2t8Wr9+8Nh9xLP9/yOG0uNI90cwnWX629f+wRf5ER/7vEXEwIt6tjeX5qcvX6/NlBw8AAAAAAAAAAAAAAAAAAAC7xP7W+v/iPtXf15rr//uydmjArQMGbpA3mAN2N+Mfqisf/1u9gyuwpzn+Q3UZ/1Bdxj9Ul/EP1WX8Q3UZ/1Bdxj9Ul/EPAAAAAM+lg3+5/2USEev/HssfmZHWtuFSWwYMmjEO1VUruwFAaR5f+rf8Hyqnr/n/j60PBxx8c4ASJN0K88lBY/PBf7/rdwIAAAAAAAAAAAAAA3D0sPX/UFVpfFx2E4CSPMP6fx8dAHucj/6H6nKODzxtFf9orw3W/wMAAAAAAAAAAADAjhnPH0k61boF6Hik6dRUxG8j4kAMJ4tL9YWZiPhdRHxRG/5Nlp8tu9EAAAAAAAAAAAAAAAAAAADwnFm9dfvqXL2+cKM98dOGkuc7UdwFdbe0pz0Ryc5XOhYRuyH2wSSG2kqSiPWs53dFw26sxq5oRpo3o+Q/TAAAAAAAAAAAAAAAAAAAUEFta4+7O/L+DrcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbek/v/bz2RPOV1yo4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANibfgkAAP//4DE4gw==") 957.582459ms ago: executing program 4 (id=90): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="06000000"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffd3d, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="00007a049900000000000200000000000000007b8af8ff00000000bfa20abcc712cfa54d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x71, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_open_procfs(0x0, 0x0) r4 = epoll_create(0x3ff) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000280)) mknod$loop(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2120}, {r1, 0x4}, {r2, 0x4118}, {0xffffffffffffffff, 0x9562}, {0xffffffffffffffff, 0xa393}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x100}], 0x7, 0x20003) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x20, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 955.862279ms ago: executing program 2 (id=91): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000080b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='mem_return_failed\x00', r1, 0x0, 0x2}, 0x26) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x55, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000280)='./file1\x00', 0xb9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r6, 0x400, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x0, 0x0, 0x2) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x9, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$eJzs3d9rW9cdAPDvle3ESZzZ2faQBZaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX9AofQX7VOf+lLocymU/AmlEGjfSyktoU3Shz60VZF81SSubMvEshLr84Hje8+9V/5+j4SOdO656AbQsU5FxFhEdEXE2YjoT7dn0hJr66V63IP7tyarJYlK5dqXSSTptvr/StLlkfRhvRHxr39E/Df5adzSyurcRKGQX0rrufL8Yq60snpudn5iJj+TXxgbGb44emn0wujQrrX18t8+e+WFt/5++f0/3vhk/Isz/6um1Zfue7wdzVhr8rj1pvfUnou67ohY2kmwZ1hX2p6edicCAEBTqt/xfx4Rv42Ih6+3OxsAAACgFSp/6Ytvk4gKAAAAsG9latfAJplsei1AX2Qy2ez6Nby/jMOZQrFU/sN0cXlhav1a2YHoyUzPFvJD6bXCA9GTVOvDtfVH9fMb6iMRcSwiXuo/VKtnJ4uFqXaf/AAAAIAOcWTD+P/r/vXxPwAAALDPDLQ7AQAAAKDljP8BAABg/9t0/J90720iAAAAQCv888qVaqnU7389dX1lea54/dxUvjSXnV+ezE4WlxazM8XiTO03++a3+3+FYnHxT7GwfDNXzpfKudLK6vh8cXmhPF67r/d43n2iAQAAYO8d+82dj5OIWPvzoVqpOpDua2KsPtba7IBWyuzs8KRVeQB7r6vdCQBt4wJf6Fzm44FtBvYvb6jv8LQBAADwLBj81VPN/5sPhOeYgTx0LvP/0LnM/0PnMv8PHe7g9of0brbjg13OBQAAaJm+Wkky2XQusC8ymWw24mjttgA9yfRsIT8UET+LiI/6ew5W68PtThoAAAAAAAAAAAAAAAAAAAAAAAAAnjOVShIVAAAAYF+LyHyepDfyH+w/3bfx/MCB5Jv+2jIibrxx7dWbE+Xy0nB1+1c/bi+/lm4/344zGAAAAMBG9XF6fRwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvpwf1bk/Wyl3Hv/TUiBhrF747e2rL33f6IOPwwie7HHpdERNcuxF+7HRHHG8VPqmnFQJrFxviZiDjU5vhHdiE+dLI71f5nrNH7LxOnasvG77/utDyte6c26/8y9f6v1s816v+ONhnjxN13cpvGvx1xortx/1OPnzxl//uff6+ubrav8mbEYMPPn+SJWLny/GKutLJ6bnZ+YiY/k18YGRm+OHpp9MLoUG56tpBP/zaM8eKv3/t+q/Yf3iT+wDbtP91k+7+7e/P+L7aIf+Z3jV//41vErz73v08/B6r7B+vra+vrjzv59ocnt2r/1Cbt3+71P9Nk+89e/f+nTR4KAOyB0srq3EShkF+yYsXK/lu5mr7Rd/zwNndMAADArnv0pb/dmQAAAAAAAAAAAAAAAAAAAEDnavmPkB188pcFetvXVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALf0QAAD//9sy0wA=") r7 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r7, &(0x7f0000000400)='./file0\x00', r7, &(0x7f0000000440)='./file1\x00') syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh]}}}}}}}, 0x0) 622.386037ms ago: executing program 2 (id=92): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) 517.26476ms ago: executing program 2 (id=93): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/179, 0xb3}, 0x2b}], 0x1, 0x40002140, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) close(r2) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000062f1f61d846e978b25a9f4a968a31dacf287da4f2a69b0a264a487816ce943be6158e65f77f67c13d1c390795263297799e436079508b5d991ac0fbd59361449c36e5ca867b858cc359b7f3ed7ae8a412b5cee55323d9fc09d51cd7921210543014c4d8b05ea7d9adb962dcafdf73223669f151ba79a9b92d3c8be1b2e9c730735a22cd5f6e9b87ab4c6b87afe0a8493524e916888", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r8, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r12}, 0x10) 511.8883ms ago: executing program 1 (id=94): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty, 0x48a1000}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000e09504000000ff00000000000000376fcbf5bd4e7a001bbb", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x249, &(0x7f00000001c0)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r3, 0x0) getdents64(r2, &(0x7f0000002ec0)=""/4096, 0x1000) r4 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x840, 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000310000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="182b0000", @ANYRES32=r2, @ANYBLOB="00000000ff07b2008516f4ff5392ffff85000000a700080009000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000085100000faffffff18270000", @ANYRES32=r5, @ANYBLOB="000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000006c0)={0x1, &(0x7f0000000040)=[{0x206, 0x0, 0x0, 0x7ffc0002}]}) ptrace(0x10, 0x1) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000600)={0x42, 0x2}, 0x10) 434.06854ms ago: executing program 0 (id=95): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000080b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='mem_return_failed\x00', r0, 0x0, 0x2}, 0x26) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x55, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000280)='./file1\x00', 0xb9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r5, 0x400, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x0, 0x0, 0x2) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x9, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") r6 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000400)='./file0\x00', r6, &(0x7f0000000440)='./file1\x00') syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh]}}}}}}}, 0x0) 314.231423ms ago: executing program 0 (id=96): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260300000fff07106706000003000000170300000ee6004ebf050000000000001d360000000000006507f9ff01000000070700004c00d6cfcc75000000000000bf54000000000000070400000400f9ffad4301000000000095004000000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0a7ad0f2f976bbd5ad0300806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f60b24a26aba1276a3fa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b9ff129e609f4c787c6002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ee19b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a72faab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eaf04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06e55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4997f83424221e94a5c4623feb8496ccdbc55b27773bf1b3e6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00f6491d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228530c946a0008c9730abb6a9b3b3b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd09edc32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8a5fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0adce515e2c9491b7773d5d542be0104d8ca9b92e0f86ce500af490acb9ce69b2f4f9a1345b8c977cfd325d2170c4b8243a8cb4a621d942b6890f5a724e97753f049ab5ba4bf31f4effcbf29e0bbacbbc7f3b572d081e9bf6ee48b8788d946d73e715864a58c7e353eaa1eb4e726f035c112af714d7e7ea088133d90afd430b665fea65e6454c95538a097ffc06bbf05cfbcd25a9508b9851ffccd3974d1553d86982635fdaaaae91981863a0d4b60e77bf68631cf0f9838cba2194bd8d73a319f8a5fdccf713e1c3456cb5555da785f89c6a828efa65f39a88fc3da2c738548c07975ccd7efe261e0b0f43bff0ea1103cc72b9d4ec8eda9c175010708cf7e4fe3bf5345be8c59099fdcfc9c642eca20537caba43"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000000300)=""/171, 0xab}], 0x100001ab, &(0x7f0000001d80), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000400), 0xfc, 0x567, &(0x7f0000001240)="$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") mknod$loop(&(0x7f00000001c0)='./file0/bus\x00', 0x100, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) shutdown(r4, 0x2) 305.882654ms ago: executing program 1 (id=97): socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x50, 0x28, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x50}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000300)='.\x00', 0xc00, 0x0) 281.297937ms ago: executing program 1 (id=98): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2c, 0x3b, 0x9, 0x0, 0x0, {0x1}, [@nested={0x18, 0x4, 0x0, 0x1, [@typed={0x2c, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0) 224.260224ms ago: executing program 1 (id=99): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) syz_clone(0x4010e000, 0x0, 0x0, 0x0, 0x0, 0x0) 62.743543ms ago: executing program 4 (id=101): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 0s ago: executing program 4 (id=102): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000c80)='./file1\x00', 0x210005, &(0x7f00000002c0)={[{@dax_never}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r7, @ANYRES64=r6], 0x40}}, 0x0) kernel console output (not intermixed with test programs): [ 21.370001][ T29] audit: type=1400 audit(1729615469.036:81): avc: denied { read } for pid=2955 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.212' (ED25519) to the list of known hosts. [ 27.727483][ T29] audit: type=1400 audit(1729615475.386:82): avc: denied { mounton } for pid=3261 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.728727][ T3261] cgroup: Unknown subsys name 'net' [ 27.750357][ T29] audit: type=1400 audit(1729615475.386:83): avc: denied { mount } for pid=3261 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.777690][ T29] audit: type=1400 audit(1729615475.426:84): avc: denied { unmount } for pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.978916][ T3261] cgroup: Unknown subsys name 'cpuset' [ 27.985124][ T3261] cgroup: Unknown subsys name 'rlimit' [ 28.113689][ T29] audit: type=1400 audit(1729615475.776:85): avc: denied { setattr } for pid=3261 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.138483][ T29] audit: type=1400 audit(1729615475.776:86): avc: denied { create } for pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.158997][ T29] audit: type=1400 audit(1729615475.776:87): avc: denied { write } for pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.179555][ T29] audit: type=1400 audit(1729615475.776:88): avc: denied { read } for pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.199852][ T29] audit: type=1400 audit(1729615475.786:89): avc: denied { mounton } for pid=3261 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.208497][ T3264] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.224726][ T29] audit: type=1400 audit(1729615475.786:90): avc: denied { mount } for pid=3261 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.256676][ T29] audit: type=1400 audit(1729615475.906:91): avc: denied { relabelto } for pid=3264 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.293155][ T3261] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.441469][ T3271] chnl_net:caif_netlink_parms(): no params data found [ 29.499409][ T3272] chnl_net:caif_netlink_parms(): no params data found [ 29.520838][ T3279] chnl_net:caif_netlink_parms(): no params data found [ 29.586895][ T3278] chnl_net:caif_netlink_parms(): no params data found [ 29.595953][ T3271] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.603045][ T3271] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.610173][ T3271] bridge_slave_0: entered allmulticast mode [ 29.616694][ T3271] bridge_slave_0: entered promiscuous mode [ 29.625570][ T3271] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.632686][ T3271] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.640016][ T3271] bridge_slave_1: entered allmulticast mode [ 29.646480][ T3271] bridge_slave_1: entered promiscuous mode [ 29.690830][ T3279] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.697952][ T3279] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.705136][ T3279] bridge_slave_0: entered allmulticast mode [ 29.711628][ T3279] bridge_slave_0: entered promiscuous mode [ 29.718183][ T3279] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.725306][ T3279] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.732447][ T3279] bridge_slave_1: entered allmulticast mode [ 29.738761][ T3279] bridge_slave_1: entered promiscuous mode [ 29.753264][ T3271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.762468][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.769664][ T3272] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.776768][ T3272] bridge_slave_0: entered allmulticast mode [ 29.783257][ T3272] bridge_slave_0: entered promiscuous mode [ 29.794283][ T3275] chnl_net:caif_netlink_parms(): no params data found [ 29.808491][ T3271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.817684][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.824814][ T3272] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.832061][ T3272] bridge_slave_1: entered allmulticast mode [ 29.838882][ T3272] bridge_slave_1: entered promiscuous mode [ 29.871691][ T3279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.893339][ T3272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.905738][ T3279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.924979][ T3271] team0: Port device team_slave_0 added [ 29.931508][ T3272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.968395][ T3271] team0: Port device team_slave_1 added [ 29.982885][ T3279] team0: Port device team_slave_0 added [ 29.988737][ T3278] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.995871][ T3278] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.004066][ T3278] bridge_slave_0: entered allmulticast mode [ 30.010526][ T3278] bridge_slave_0: entered promiscuous mode [ 30.028726][ T3279] team0: Port device team_slave_1 added [ 30.034458][ T3278] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.041658][ T3278] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.048870][ T3278] bridge_slave_1: entered allmulticast mode [ 30.055193][ T3278] bridge_slave_1: entered promiscuous mode [ 30.067058][ T3272] team0: Port device team_slave_0 added [ 30.091275][ T3271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.098263][ T3271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.124234][ T3271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.135413][ T3272] team0: Port device team_slave_1 added [ 30.151573][ T3278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.161064][ T3271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.168083][ T3271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.194083][ T3271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.209478][ T3275] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.216626][ T3275] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.223908][ T3275] bridge_slave_0: entered allmulticast mode [ 30.230301][ T3275] bridge_slave_0: entered promiscuous mode [ 30.236840][ T3275] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.243937][ T3275] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.251224][ T3275] bridge_slave_1: entered allmulticast mode [ 30.257639][ T3275] bridge_slave_1: entered promiscuous mode [ 30.264264][ T3279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.271235][ T3279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.297323][ T3279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.309112][ T3278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.325979][ T3272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.332984][ T3272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.359034][ T3272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.374498][ T3279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.381476][ T3279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.407520][ T3279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.437324][ T3272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.444346][ T3272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.470356][ T3272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.487699][ T3275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.501576][ T3278] team0: Port device team_slave_0 added [ 30.520224][ T3275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.535874][ T3271] hsr_slave_0: entered promiscuous mode [ 30.543826][ T3271] hsr_slave_1: entered promiscuous mode [ 30.550568][ T3278] team0: Port device team_slave_1 added [ 30.566988][ T3279] hsr_slave_0: entered promiscuous mode [ 30.573289][ T3279] hsr_slave_1: entered promiscuous mode [ 30.579159][ T3279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.586797][ T3279] Cannot create hsr debugfs directory [ 30.608008][ T3275] team0: Port device team_slave_0 added [ 30.614790][ T3275] team0: Port device team_slave_1 added [ 30.624763][ T3278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.631781][ T3278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.657722][ T3278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.669135][ T3278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.676153][ T3278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.702104][ T3278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.738042][ T3275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.745028][ T3275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.770934][ T3275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.783861][ T3272] hsr_slave_0: entered promiscuous mode [ 30.790202][ T3272] hsr_slave_1: entered promiscuous mode [ 30.796106][ T3272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.803682][ T3272] Cannot create hsr debugfs directory [ 30.816803][ T3275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.823797][ T3275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.849735][ T3275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.899573][ T3278] hsr_slave_0: entered promiscuous mode [ 30.905630][ T3278] hsr_slave_1: entered promiscuous mode [ 30.911625][ T3278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.919195][ T3278] Cannot create hsr debugfs directory [ 30.988663][ T3275] hsr_slave_0: entered promiscuous mode [ 30.994828][ T3275] hsr_slave_1: entered promiscuous mode [ 31.000924][ T3275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.009595][ T3275] Cannot create hsr debugfs directory [ 31.074772][ T3279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.090898][ T3279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.099858][ T3279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.122141][ T3279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.152649][ T3271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.168721][ T3271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.178199][ T3271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.193697][ T3271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.215493][ T3272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.230609][ T3272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.251633][ T3278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.260303][ T3272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.270769][ T3272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.281962][ T3278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.298035][ T3278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.322159][ T3278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.332350][ T3275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.341008][ T3275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.351965][ T3275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.361018][ T3275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.411291][ T3279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.436403][ T3271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.455780][ T3279] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.470920][ T3271] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.480361][ T3272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.495493][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.502579][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.511475][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.518560][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.528065][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.535104][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.553643][ T3272] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.571896][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.579010][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.590187][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.597284][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.634623][ T3275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.645650][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.652812][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.666630][ T3278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.684778][ T3279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.695228][ T3279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.709725][ T3275] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.744586][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.751694][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.781045][ T1968] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.788245][ T1968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.825707][ T3278] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.847080][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.854235][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.872965][ T3271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.888076][ T3272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.896348][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.903444][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.919334][ T3279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.069055][ T3279] veth0_vlan: entered promiscuous mode [ 32.078559][ T3275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.093608][ T3279] veth1_vlan: entered promiscuous mode [ 32.130927][ T3279] veth0_macvtap: entered promiscuous mode [ 32.138603][ T3271] veth0_vlan: entered promiscuous mode [ 32.145841][ T3278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.154091][ T3272] veth0_vlan: entered promiscuous mode [ 32.161066][ T3279] veth1_macvtap: entered promiscuous mode [ 32.169428][ T3271] veth1_vlan: entered promiscuous mode [ 32.189811][ T3272] veth1_vlan: entered promiscuous mode [ 32.218201][ T3279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.238324][ T3279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.249458][ T3271] veth0_macvtap: entered promiscuous mode [ 32.257312][ T3271] veth1_macvtap: entered promiscuous mode [ 32.274054][ T3279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.282844][ T3279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.291584][ T3279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.300425][ T3279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.322395][ T3272] veth0_macvtap: entered promiscuous mode [ 32.329629][ T3272] veth1_macvtap: entered promiscuous mode [ 32.336807][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.347359][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.358228][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.375359][ T3278] veth0_vlan: entered promiscuous mode [ 32.390129][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.400683][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.410503][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.421086][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.431662][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.440188][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.450668][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.461415][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.472252][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.482804][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.492791][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.503333][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.514155][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.523421][ T3278] veth1_vlan: entered promiscuous mode [ 32.530877][ T3272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.540000][ T3272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.548855][ T3272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.557695][ T3272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.580940][ T3271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.589877][ T3271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.598818][ T3271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.607519][ T3271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.633621][ T3275] veth0_vlan: entered promiscuous mode [ 32.633861][ T3279] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.641844][ T3275] veth1_vlan: entered promiscuous mode [ 32.670790][ T3278] veth0_macvtap: entered promiscuous mode [ 32.701691][ T3278] veth1_macvtap: entered promiscuous mode [ 32.714816][ T3275] veth0_macvtap: entered promiscuous mode [ 32.728037][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 32.728054][ T29] audit: type=1400 audit(1729615480.396:127): avc: denied { create } for pid=3408 comm="syz.0.1" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.735335][ T3275] veth1_macvtap: entered promiscuous mode [ 32.762609][ T29] audit: type=1400 audit(1729615480.426:128): avc: denied { create } for pid=3408 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 32.789937][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.800598][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.810695][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.821205][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.831154][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.841630][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.842457][ T3411] syz.0.1[3411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.852415][ T3278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.858945][ T3411] syz.0.1[3411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.882634][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.904265][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.914115][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.924576][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.934472][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.944986][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.945508][ T29] audit: type=1326 audit(1729615480.586:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3408 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc163c2dff9 code=0x7ffc0000 [ 32.955119][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.988332][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.006903][ T3275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.008825][ T3416] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 33.014643][ T29] audit: type=1326 audit(1729615480.656:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3408 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc163c2dff9 code=0x7ffc0000 [ 33.048392][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.058900][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.068739][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.079361][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.089543][ T3278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.097434][ T3420] loop0: detected capacity change from 0 to 512 [ 33.099998][ T3278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.106363][ T29] audit: type=1400 audit(1729615480.696:131): avc: denied { relabelto } for pid=3413 comm="syz.2.3" name="memfd:" dev="tmpfs" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 33.140556][ T3278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.142177][ T29] audit: type=1400 audit(1729615480.696:132): avc: denied { associate } for pid=3413 comm="syz.2.3" name="memfd:" dev="tmpfs" ino=1024 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 33.176158][ T29] audit: type=1400 audit(1729615480.706:133): avc: denied { name_bind } for pid=3414 comm="syz.1.2" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 33.197261][ T29] audit: type=1400 audit(1729615480.706:134): avc: denied { node_bind } for pid=3414 comm="syz.1.2" saddr=::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 33.218225][ T29] audit: type=1400 audit(1729615480.756:135): avc: denied { create } for pid=3418 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.239791][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.250338][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.260196][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.269584][ T3420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.270788][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.293043][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.293690][ T3420] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.303575][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.303589][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.334000][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.349969][ T3419] loop1: detected capacity change from 0 to 512 [ 33.356533][ T3419] ext4: Unknown parameter 'func' [ 33.362079][ T3422] loop7: detected capacity change from 0 to 16384 [ 33.384866][ T3275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.430365][ T3275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.439320][ T3275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.448171][ T3275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.457008][ T3275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.469875][ T3279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.470416][ T29] audit: type=1400 audit(1729615480.956:136): avc: denied { mount } for pid=3418 comm="syz.0.7" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.491070][ T3278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.509023][ T3278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.517866][ T3278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.526574][ T3278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.573223][ T3429] loop0: detected capacity change from 0 to 1024 [ 33.631487][ T3429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.712558][ T3436] loop4: detected capacity change from 0 to 164 [ 33.836907][ T3440] program syz.3.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.977256][ T3421] I/O error, dev loop7, sector 12544 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 33.987409][ T3421] Buffer I/O error on dev loop7, logical block 1568, lost async page write [ 33.996073][ T3421] Buffer I/O error on dev loop7, logical block 1569, lost async page write [ 34.004849][ T3421] Buffer I/O error on dev loop7, logical block 1570, lost async page write [ 34.013506][ T3421] Buffer I/O error on dev loop7, logical block 1571, lost async page write [ 34.022195][ T3421] Buffer I/O error on dev loop7, logical block 1572, lost async page write [ 34.030841][ T3421] Buffer I/O error on dev loop7, logical block 1573, lost async page write [ 34.039530][ T3421] Buffer I/O error on dev loop7, logical block 1574, lost async page write [ 34.048248][ T3421] Buffer I/O error on dev loop7, logical block 1575, lost async page write [ 34.056862][ T3421] Buffer I/O error on dev loop7, logical block 1576, lost async page write [ 34.065734][ T3421] Buffer I/O error on dev loop7, logical block 1577, lost async page write [ 34.087149][ T3447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 34.094497][ T3421] I/O error, dev loop7, sector 13568 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 34.111972][ T3421] I/O error, dev loop7, sector 14592 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 34.124763][ T3421] I/O error, dev loop7, sector 15616 op 0x1:(WRITE) flags 0x800 phys_seg 96 prio class 0 [ 34.130065][ T3449] loop3: detected capacity change from 0 to 512 [ 34.170061][ T3449] ======================================================= [ 34.170061][ T3449] WARNING: The mand mount option has been deprecated and [ 34.170061][ T3449] and is ignored by this kernel. Remove the mand [ 34.170061][ T3449] option from the mount to silence this warning. [ 34.170061][ T3449] ======================================================= [ 34.218870][ T3453] loop2: detected capacity change from 0 to 1024 [ 34.226055][ T3449] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.240097][ T3453] EXT4-fs: Ignoring removed orlov option [ 34.245842][ T3453] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.280974][ T3449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.295692][ T3453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.328076][ T3449] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.378921][ T3453] team0 (unregistering): Port device team_slave_0 removed [ 34.391148][ T3449] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 34.417453][ T3279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.432163][ T3453] team0 (unregistering): Port device team_slave_1 removed [ 34.456459][ T3278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.469022][ T3459] netlink: 'syz.1.15': attribute type 10 has an invalid length. [ 34.482302][ T3459] batman_adv: batadv0: Adding interface: team0 [ 34.488533][ T3459] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.513726][ T3459] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 34.560317][ T3467] syz.3.17[3467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.560396][ T3467] syz.3.17[3467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.566837][ T3459] loop1: detected capacity change from 0 to 2048 [ 34.572792][ T3467] syz.3.17[3467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.614030][ T3467] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.637373][ T3459] loop1: p1 < > p4 [ 34.642776][ T3459] loop1: p4 size 8388608 extends beyond EOD, truncated [ 34.655590][ T2973] loop1: p1 < > p4 [ 34.667311][ T3470] program syz.3.17 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.693064][ T2973] loop1: p4 size 8388608 extends beyond EOD, truncated [ 34.722878][ T3265] udevd[3265]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 34.739610][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 34.748992][ T3436] syz.4.5 (3436) used greatest stack depth: 9880 bytes left [ 34.773535][ T3265] udevd[3265]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 34.775211][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 34.826090][ T3476] loop4: detected capacity change from 0 to 1024 [ 34.841948][ T3476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.874895][ T3481] loop0: detected capacity change from 0 to 512 [ 34.885884][ T3481] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.899730][ T3481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.912752][ T3481] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.931469][ T3481] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 34.946621][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.978112][ T3279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.015337][ T3487] loop0: detected capacity change from 0 to 512 [ 35.022095][ T3487] ext4: Unknown parameter 'func' [ 35.052023][ T3485] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.059390][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.123936][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.135218][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.172902][ T3485] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.181922][ T3485] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.190853][ T3485] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.199911][ T3485] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.227940][ T3488] bridge_slave_0: left allmulticast mode [ 35.233679][ T3488] bridge_slave_0: left promiscuous mode [ 35.239428][ T3488] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.247083][ T3488] bridge_slave_1: left allmulticast mode [ 35.252968][ T3488] bridge_slave_1: left promiscuous mode [ 35.259023][ T3488] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.267806][ T3488] bond0: (slave bond_slave_0): Releasing backup interface [ 35.275879][ T3488] bond0: (slave bond_slave_1): Releasing backup interface [ 35.284346][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.291865][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.331666][ T3495] loop2: detected capacity change from 0 to 1024 [ 35.349518][ T3495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.439047][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.466993][ T3500] vlan2: entered allmulticast mode [ 35.472350][ T3500] bridge_slave_0: entered allmulticast mode [ 35.479521][ T3500] bridge_slave_0: left allmulticast mode [ 35.502604][ T3467] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.581946][ T3509] loop1: detected capacity change from 0 to 128 [ 35.593625][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.634875][ T3511] loop4: detected capacity change from 0 to 512 [ 35.651276][ T3509] syz.1.27: attempt to access beyond end of device [ 35.651276][ T3509] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 35.683835][ T3511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.689803][ T3509] syz.1.27: attempt to access beyond end of device [ 35.689803][ T3509] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 35.713123][ T3509] syz.1.27: attempt to access beyond end of device [ 35.713123][ T3509] loop1: rw=0, sector=153, nr_sectors = 8 limit=128 [ 35.730168][ T3511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.737063][ T3509] syz.1.27: attempt to access beyond end of device [ 35.737063][ T3509] loop1: rw=0, sector=153, nr_sectors = 8 limit=128 [ 35.761361][ T3509] syz.1.27: attempt to access beyond end of device [ 35.761361][ T3509] loop1: rw=0, sector=153, nr_sectors = 8 limit=128 [ 35.773895][ T3508] syz.1.27: attempt to access beyond end of device [ 35.773895][ T3508] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 35.774663][ T3509] syz.1.27: attempt to access beyond end of device [ 35.774663][ T3509] loop1: rw=0, sector=153, nr_sectors = 8 limit=128 [ 35.792700][ T3511] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.803807][ T3508] syz.1.27: attempt to access beyond end of device [ 35.803807][ T3508] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 35.823931][ T3508] syz.1.27: attempt to access beyond end of device [ 35.823931][ T3508] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 35.839779][ T3508] syz.1.27: attempt to access beyond end of device [ 35.839779][ T3508] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 35.859033][ T3511] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 35.895635][ T3521] syzkaller0: entered promiscuous mode [ 35.901285][ T3521] syzkaller0: entered allmulticast mode [ 35.959648][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.982666][ T3528] loop0: detected capacity change from 0 to 1024 [ 36.002966][ T3530] netlink: 'syz.2.31': attribute type 10 has an invalid length. [ 36.003408][ T3528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.010668][ T3530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.31'. [ 36.027628][ T3531] syz.4.35 uses obsolete (PF_INET,SOCK_PACKET) [ 36.031014][ T3530] bridge0: port 1(ipvlan0) entered blocking state [ 36.040416][ T3530] bridge0: port 1(ipvlan0) entered disabled state [ 36.049023][ T3528] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 36.059214][ T3530] ipvlan0: entered allmulticast mode [ 36.064586][ T3530] veth0_vlan: entered allmulticast mode [ 36.071209][ T3530] ipvlan0: left allmulticast mode [ 36.076269][ T3530] veth0_vlan: left allmulticast mode [ 36.083864][ T3530] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 36.088403][ T3528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.138467][ T3530] netlink: 'syz.2.31': attribute type 3 has an invalid length. [ 36.191126][ T3531] tipc: Can't bind to reserved service type 2 [ 36.204986][ T3528] Zero length message leads to an empty skb [ 36.226198][ T3279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.255399][ T3539] loop0: detected capacity change from 0 to 512 [ 36.282497][ T3539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.299751][ T3539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.319357][ T3539] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.355578][ T3539] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.384992][ T3467] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.416570][ T3279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.460465][ T3467] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.486109][ T3545] serio: Serial port ptm0 [ 36.523310][ T3549] loop4: detected capacity change from 0 to 1024 [ 36.532386][ T3549] EXT4-fs: dax option not supported [ 36.544964][ T3467] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.564684][ T3545] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 36.564684][ T3545] program syz.0.38 not setting count and/or reply_len properly [ 36.569757][ T3467] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.611981][ T3467] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.638935][ T3467] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.803312][ C0] hrtimer: interrupt took 38149 ns [ 36.820177][ T3560] loop4: detected capacity change from 0 to 512 [ 36.879653][ T3560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.314367][ T3560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.435179][ T3560] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.541185][ T3560] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 37.583391][ T3568] loop3: detected capacity change from 0 to 512 [ 37.601923][ T3568] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 37.612267][ T3568] EXT4-fs (loop3): group descriptors corrupted! [ 37.640636][ T3573] tipc: Enabling of bearer rejected, failed to enable media [ 37.741625][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.782929][ T3573] loop0: detected capacity change from 0 to 1024 [ 37.812989][ T3573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.832823][ T3573] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.869983][ T3573] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 37.899575][ T3573] EXT4-fs (loop0): orphan cleanup on readonly fs [ 37.959065][ T3573] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm syz.0.44: Invalid inode table block 0 in block_group 0 [ 37.989174][ T3579] loop2: detected capacity change from 0 to 128 [ 38.015913][ T3573] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Corrupt filesystem [ 38.048754][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 38.048771][ T29] audit: type=1400 audit(1729615485.716:648): avc: denied { mount } for pid=3577 comm="syz.2.47" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.098736][ T3573] EXT4-fs error (device loop0): ext4_quota_write:7251: inode #3: comm syz.0.44: mark_inode_dirty error [ 38.149819][ T3573] Quota error (device loop0): write_blk: dquota write failed [ 38.157388][ T3573] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 38.167486][ T3573] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.44: Failed to acquire dquot type 0 [ 38.458478][ T3573] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm syz.0.44: Invalid inode table block 0 in block_group 0 [ 38.478270][ T3573] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Corrupt filesystem [ 38.520242][ T3573] EXT4-fs error (device loop0): ext4_ext_truncate:4457: inode #15: comm syz.0.44: mark_inode_dirty error [ 38.567992][ T3573] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm syz.0.44: Invalid inode table block 0 in block_group 0 [ 38.603431][ T3573] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Corrupt filesystem [ 38.646065][ T29] audit: type=1400 audit(1729615486.306:649): avc: denied { unmount } for pid=3271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.822340][ T3573] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 38.831200][ T3573] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm syz.0.44: Invalid inode table block 0 in block_group 0 [ 38.853981][ T3573] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Corrupt filesystem [ 38.874418][ T3573] EXT4-fs error (device loop0): ext4_truncate:4208: inode #15: comm syz.0.44: mark_inode_dirty error [ 38.899333][ T3573] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 38.948904][ T3573] EXT4-fs (loop0): 1 truncate cleaned up [ 39.025251][ T3582] loop1: detected capacity change from 0 to 1024 [ 39.224008][ T3582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.065503][ T3271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.289174][ T3573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.303860][ T29] audit: type=1400 audit(1729615487.976:650): avc: denied { write } for pid=3567 comm="syz.3.43" name="event2" dev="devtmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.426496][ T29] audit: type=1400 audit(1729615487.996:651): avc: denied { open } for pid=3567 comm="syz.3.43" path="/dev/input/event2" dev="devtmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.459911][ T3594] loop2: detected capacity change from 0 to 164 [ 40.472205][ T3590] loop4: detected capacity change from 0 to 512 [ 40.480208][ T3279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.497448][ T29] audit: type=1400 audit(1729615488.086:652): avc: denied { create } for pid=3593 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 40.516953][ T29] audit: type=1400 audit(1729615488.086:653): avc: denied { read } for pid=3593 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 40.524309][ T3590] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.536041][ T29] audit: type=1326 audit(1729615488.126:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3589 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674085dff9 code=0x7ffc0000 [ 40.558082][ T3594] Unable to read rock-ridge attributes [ 40.567626][ T29] audit: type=1326 audit(1729615488.126:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3589 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674085dff9 code=0x7ffc0000 [ 40.606966][ T3594] Unable to read rock-ridge attributes [ 40.630974][ T3590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.652188][ T3590] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.739565][ T3590] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 40.748263][ T3609] loop3: detected capacity change from 0 to 1024 [ 40.760770][ T3609] EXT4-fs: dax option not supported [ 40.808498][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.818643][ T3607] pim6reg1: entered promiscuous mode [ 40.823969][ T3607] pim6reg1: entered allmulticast mode [ 40.884648][ T3611] loop4: detected capacity change from 0 to 1024 [ 40.892473][ T3611] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 40.902295][ T3611] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 40.913873][ T3611] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 40.941843][ T3611] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: inode #5: comm syz.4.55: unexpected bad inode w/o EXT4_IGET_BAD [ 40.965044][ T3611] EXT4-fs (loop4): no journal found [ 40.970387][ T3611] EXT4-fs (loop4): can't get journal size [ 40.980525][ T3617] loop0: detected capacity change from 0 to 1024 [ 40.999741][ T3611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.002155][ T3620] loop1: detected capacity change from 0 to 512 [ 41.012686][ T3617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.046427][ T3620] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.057036][ T3627] capability: warning: `syz.3.61' uses 32-bit capabilities (legacy support in use) [ 41.093847][ T3620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.107879][ T3620] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.126032][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.136924][ T3636] loop3: detected capacity change from 0 to 1024 [ 41.164567][ T3620] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 41.197325][ T3636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.198981][ T3271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.244004][ T3641] netlink: 'syz.4.64': attribute type 6 has an invalid length. [ 41.254496][ T3645] vlan2: entered allmulticast mode [ 41.316066][ T3647] tipc: Enabling of bearer rejected, failed to enable media [ 41.423335][ T3656] loop1: detected capacity change from 0 to 512 [ 41.432555][ T3656] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.447741][ T3657] loop2: detected capacity change from 0 to 1024 [ 41.458477][ T3657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.469274][ T3657] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.490641][ T3657] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 41.498795][ T3657] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.506061][ T3657] EXT4-fs error (device loop2): __ext4_get_inode_loc:4403: comm syz.2.66: Invalid inode table block 0 in block_group 0 [ 41.514050][ T3661] loop4: detected capacity change from 0 to 1024 [ 41.521403][ T3657] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Corrupt filesystem [ 41.528192][ T3661] EXT4-fs: dax option not supported [ 41.534654][ T3657] EXT4-fs error (device loop2): ext4_quota_write:7251: inode #3: comm syz.2.66: mark_inode_dirty error [ 41.551133][ T3656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.555076][ T3657] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.66: Failed to acquire dquot type 0 [ 41.574987][ T3656] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.577443][ T3661] syz_tun: entered promiscuous mode [ 41.590242][ T3657] EXT4-fs error (device loop2): __ext4_get_inode_loc:4403: comm syz.2.66: Invalid inode table block 0 in block_group 0 [ 41.600174][ T3656] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 41.603377][ T3657] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Corrupt filesystem [ 41.620092][ T3661] ip6gretap0: entered promiscuous mode [ 41.627250][ T3657] EXT4-fs error (device loop2): ext4_ext_truncate:4457: inode #15: comm syz.2.66: mark_inode_dirty error [ 41.643902][ T3657] EXT4-fs error (device loop2): __ext4_get_inode_loc:4403: comm syz.2.66: Invalid inode table block 0 in block_group 0 [ 41.657896][ T3657] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Corrupt filesystem [ 41.675079][ T3657] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 41.686422][ T3657] EXT4-fs error (device loop2): __ext4_get_inode_loc:4403: comm syz.2.66: Invalid inode table block 0 in block_group 0 [ 41.687096][ T3271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.699732][ T3657] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5780: Corrupt filesystem [ 41.718924][ T3657] EXT4-fs error (device loop2): ext4_truncate:4208: inode #15: comm syz.2.66: mark_inode_dirty error [ 41.731512][ T3664] netlink: 4292 bytes leftover after parsing attributes in process `syz.4.73'. [ 41.741322][ T3657] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 41.761995][ T3657] EXT4-fs (loop2): 1 truncate cleaned up [ 41.762372][ T3279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.773449][ T3657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.815585][ T3668] loop4: detected capacity change from 0 to 1024 [ 41.868940][ T3668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.332047][ T3679] loop1: detected capacity change from 0 to 256 [ 42.382450][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.401623][ T3679] FAT-fs (loop1): IO charset koi8-r not found [ 42.421408][ T3278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.479822][ T3685] loop0: detected capacity change from 0 to 1024 [ 42.486559][ T3685] EXT4-fs: dax option not supported [ 42.502418][ T3685] syz_tun: entered promiscuous mode [ 42.510109][ T3685] ip6gretap0: entered promiscuous mode [ 42.516461][ T3685] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 42.520048][ T3684] loop2: detected capacity change from 0 to 2048 [ 42.526652][ T3685] Cannot create hsr debugfs directory [ 42.531086][ T3684] EXT4-fs: Ignoring removed orlov option [ 42.550225][ T3684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.690587][ T3700] Driver unsupported XDP return value 0 on prog (id 86) dev N/A, expect packet loss! [ 42.706587][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.751046][ T3712] tipc: Enabling of bearer rejected, failed to enable media [ 42.773116][ T3712] loop0: detected capacity change from 0 to 1024 [ 42.792703][ T3712] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.805009][ T3712] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.816504][ T3712] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 42.825399][ T3712] EXT4-fs (loop0): orphan cleanup on readonly fs [ 42.833163][ T3712] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm syz.0.83: Invalid inode table block 0 in block_group 0 [ 42.846767][ T3712] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Corrupt filesystem [ 42.857014][ T3712] EXT4-fs error (device loop0): ext4_quota_write:7251: inode #3: comm syz.0.83: mark_inode_dirty error [ 42.868777][ T3712] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.83: Failed to acquire dquot type 0 [ 42.869930][ T3717] loop1: detected capacity change from 0 to 1024 [ 42.884259][ T3712] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm syz.0.83: Invalid inode table block 0 in block_group 0 [ 42.891451][ T3717] EXT4-fs: dax option not supported [ 42.909438][ T3712] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Corrupt filesystem [ 42.920118][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.932768][ T3712] EXT4-fs error (device loop0): ext4_ext_truncate:4457: inode #15: comm syz.0.83: mark_inode_dirty error [ 42.944268][ T3712] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm syz.0.83: Invalid inode table block 0 in block_group 0 [ 42.967216][ T3712] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Corrupt filesystem [ 42.982452][ T3712] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 42.993038][ T3712] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm syz.0.83: Invalid inode table block 0 in block_group 0 [ 43.006676][ T3712] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Corrupt filesystem [ 43.279767][ T3722] loop1: detected capacity change from 0 to 512 [ 43.336790][ T3712] EXT4-fs error (device loop0): ext4_truncate:4208: inode #15: comm syz.0.83: mark_inode_dirty error [ 43.341712][ T3722] ext4: Unknown parameter 'func' [ 43.369001][ T3712] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 43.382859][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 43.382872][ T29] audit: type=1400 audit(1729615491.046:979): avc: denied { relabelfrom } for pid=3723 comm="syz.4.85" name="" dev="pipefs" ino=4019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 43.423558][ T3712] EXT4-fs (loop0): 1 truncate cleaned up [ 43.440805][ T3712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.456294][ T3727] loop4: detected capacity change from 0 to 512 [ 43.471562][ T3727] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.484734][ T3727] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.494976][ T3279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.518862][ T3727] EXT4-fs (loop4): 1 truncate cleaned up [ 43.519239][ T3730] tipc: Enabling of bearer rejected, failed to enable media [ 43.525794][ T3727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.552309][ T29] audit: type=1400 audit(1729615491.216:980): avc: denied { setopt } for pid=3726 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 43.571596][ T29] audit: type=1400 audit(1729615491.216:981): avc: denied { listen } for pid=3726 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 43.602435][ T3730] loop0: detected capacity change from 0 to 1024 [ 43.609943][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.620537][ T3730] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.633070][ T3730] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.670305][ T29] audit: type=1326 audit(1729615491.336:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fad71dff9 code=0x7ffc0000 [ 43.671850][ T3730] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 43.702122][ T3730] EXT4-fs (loop0): orphan cleanup on readonly fs [ 43.709433][ T29] audit: type=1326 audit(1729615491.366:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1fad71dff9 code=0x7ffc0000 [ 43.711051][ T3734] loop2: detected capacity change from 0 to 512 [ 43.732565][ T29] audit: type=1326 audit(1729615491.366:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fad71dff9 code=0x7ffc0000 [ 43.732603][ T29] audit: type=1326 audit(1729615491.366:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fad71dff9 code=0x7ffc0000 [ 43.732635][ T29] audit: type=1326 audit(1729615491.366:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fad71dff9 code=0x7ffc0000 [ 43.768767][ T3730] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm syz.0.89: Invalid inode table block 0 in block_group 0 [ 43.785181][ T29] audit: type=1326 audit(1729615491.366:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fad71dff9 code=0x7ffc0000 [ 43.810350][ T3734] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.821222][ T29] audit: type=1326 audit(1729615491.366:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fad71dff9 code=0x7ffc0000 [ 43.850341][ T3730] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Corrupt filesystem [ 43.885372][ T3730] EXT4-fs error (device loop0): ext4_quota_write:7251: inode #3: comm syz.0.89: mark_inode_dirty error [ 43.887057][ T3734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.897509][ T3730] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.89: Failed to acquire dquot type 0 [ 43.909070][ T3734] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.921748][ T3730] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm syz.0.89: Invalid inode table block 0 in block_group 0 [ 43.936120][ T3734] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 43.944692][ T3730] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Corrupt filesystem [ 43.968356][ T3730] EXT4-fs error (device loop0): ext4_ext_truncate:4457: inode #15: comm syz.0.89: mark_inode_dirty error [ 43.980854][ T3730] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm syz.0.89: Invalid inode table block 0 in block_group 0 [ 43.981033][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.993826][ T3730] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Corrupt filesystem [ 44.013319][ T3730] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 44.022146][ T3730] EXT4-fs error (device loop0): __ext4_get_inode_loc:4403: comm syz.0.89: Invalid inode table block 0 in block_group 0 [ 44.038764][ T3730] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Corrupt filesystem [ 44.057463][ T3730] EXT4-fs error (device loop0): ext4_truncate:4208: inode #15: comm syz.0.89: mark_inode_dirty error [ 44.074447][ T3730] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 44.083791][ T3730] EXT4-fs (loop0): 1 truncate cleaned up [ 44.091676][ T3730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.107085][ T3745] loop1: detected capacity change from 0 to 256 [ 44.123162][ T3279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.125963][ T3745] FAT-fs (loop1): Directory bread(block 64) failed [ 44.153467][ T3745] FAT-fs (loop1): Directory bread(block 65) failed [ 44.161205][ T3745] FAT-fs (loop1): Directory bread(block 66) failed [ 44.168081][ T3745] FAT-fs (loop1): Directory bread(block 67) failed [ 44.173956][ T3748] loop0: detected capacity change from 0 to 512 [ 44.175003][ T3745] FAT-fs (loop1): Directory bread(block 68) failed [ 44.187835][ T3745] FAT-fs (loop1): Directory bread(block 69) failed [ 44.194698][ T3745] FAT-fs (loop1): Directory bread(block 70) failed [ 44.198532][ T3748] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.201642][ T3745] FAT-fs (loop1): Directory bread(block 71) failed [ 44.216448][ T3745] FAT-fs (loop1): Directory bread(block 72) failed [ 44.223047][ T3745] FAT-fs (loop1): Directory bread(block 73) failed [ 44.230300][ T3748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.243095][ T3748] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.261707][ T3748] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 44.288435][ T3279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.336914][ T3754] loop0: detected capacity change from 0 to 1024 [ 44.362445][ T3754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.401703][ T3763] syz.1.100[3763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.401815][ T3763] syz.1.100[3763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.413529][ T3763] syz.1.100[3763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.516958][ T3765] vlan2: entered allmulticast mode [ 44.605831][ T3769] loop4: detected capacity change from 0 to 1024 [ 44.612716][ T3769] EXT4-fs: dax option not supported [ 44.621812][ T3769] ================================================================== [ 44.629933][ T3769] BUG: KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event [ 44.638702][ T3769] [ 44.641040][ T3769] write to 0xffff888105196b34 of 4 bytes by task 3265 on cpu 1: [ 44.648685][ T3769] fsnotify_detach_mark+0xba/0x160 [ 44.653816][ T3769] fsnotify_destroy_mark+0x6e/0x140 [ 44.659014][ T3769] __se_sys_inotify_rm_watch+0xf1/0x170 [ 44.664563][ T3769] __x64_sys_inotify_rm_watch+0x31/0x40 [ 44.670119][ T3769] x64_sys_call+0x1ae0/0x2d60 [ 44.674824][ T3769] do_syscall_64+0xc9/0x1c0 [ 44.679358][ T3769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.685277][ T3769] [ 44.687594][ T3769] read to 0xffff888105196b34 of 4 bytes by task 3769 on cpu 0: [ 44.695129][ T3769] inotify_handle_inode_event+0x2c2/0x310 [ 44.700856][ T3769] fsnotify_handle_inode_event+0x18e/0x1f0 [ 44.706662][ T3769] fsnotify+0x10b0/0x11a0 [ 44.710988][ T3769] __fsnotify_parent+0x285/0x380 [ 44.715943][ T3769] __fput+0x5a6/0x6d0 [ 44.719927][ T3769] __fput_sync+0x43/0x60 [ 44.724170][ T3769] __se_sys_close+0xf9/0x1a0 [ 44.728775][ T3769] __x64_sys_close+0x1f/0x30 [ 44.733491][ T3769] x64_sys_call+0x25cb/0x2d60 [ 44.738174][ T3769] do_syscall_64+0xc9/0x1c0 [ 44.742675][ T3769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.748590][ T3769] [ 44.750917][ T3769] value changed: 0x00000003 -> 0x00000000 [ 44.756626][ T3769] [ 44.758959][ T3769] Reported by Kernel Concurrency Sanitizer on: [ 44.765116][ T3769] CPU: 0 UID: 0 PID: 3769 Comm: syz.4.102 Not tainted 6.12.0-rc4-syzkaller-00045-gd12937763990 #0 [ 44.775724][ T3769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 44.785784][ T3769] ================================================================== [ 44.818802][ T3769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 45.097092][ T3279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.470088][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.529288][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.589911][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.669298][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.762502][ T36] bridge_slave_1: left allmulticast mode [ 45.768218][ T36] bridge_slave_1: left promiscuous mode [ 45.773873][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.783238][ T36] bridge_slave_0: left allmulticast mode [ 45.789009][ T36] bridge_slave_0: left promiscuous mode [ 45.794869][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.901417][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.912311][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.929720][ T36] bond0 (unregistering): Released all slaves [ 45.983093][ T36] hsr_slave_0: left promiscuous mode [ 45.989398][ T36] hsr_slave_1: left promiscuous mode [ 46.006762][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.014312][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.023799][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.031376][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.058116][ T36] veth1_macvtap: left promiscuous mode [ 46.063660][ T36] veth0_macvtap: left promiscuous mode [ 46.069273][ T36] veth1_vlan: left promiscuous mode [ 46.074575][ T36] veth0_vlan: left promiscuous mode [ 46.205482][ T36] team0 (unregistering): Port device team_slave_1 removed [ 46.217296][ T36] team0 (unregistering): Port device team_slave_0 removed