last executing test programs: 7m18.334685532s ago: executing program 32 (id=475): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000"], 0x7c}}, 0x4004944) r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000003000000080000000400000002000000", @ANYRES32, @ANYBLOB="0000000000000000000000d7b05e47509701c6a50a3d9893d6a10000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x80}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14}, 0x94) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, 0x0) r5 = gettid() getpriority(0x2, r5) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$kcm(0x2, 0xa, 0x2) mq_open(&(0x7f0000000000)='fd\x00', 0x0, 0x2, &(0x7f0000000080)={0x87, 0xa, 0x2cea, 0x7}) 6m56.885151267s ago: executing program 33 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x5) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r3, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 4m59.612986828s ago: executing program 34 (id=3184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 4m48.261823978s ago: executing program 35 (id=3392): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYRES8=r0, @ANYRES64, @ANYRES32, @ANYRES8], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200004845b57e00c937b50000000002", @ANYRES32=r5], 0x20, 0x2400e044}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0xe213}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) sigaltstack(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="89f108e46f9c7621747d4aae80d673342173f92e2bcf7b1f17ab933f067856c8b45faa48c065ef2851c9fb32c840b8a663d9ed610c62464981f56e96dae50d0b1b65ef82920b3f366d615570d6d8ca7ad7a713d6c8c7b17fc5efac1531b926d08d0b93482304b8f3e1b45a355381d7f0f1e2cf9d0ddec3b2ded0ce0ea6fa9422d9a894ef5a481ac4ed5fd30531d73d38a5dd4fd46f34ad4a46cefc86c86b015370d67075b790422b170ba8185593bf9e6c6455470ec1e573396837ec2847bfa075cc5657d89ddd31824e7c9fa8ecb00455db82b32d7abd16eb82f745", @ANYBLOB="9b0349991066991c54288845c2eee8d2b1d3b2365ebad94abc262a7059de0c60cdef99437a9c2133599c7363914382224c296dcdb9fecef4d411c63cae025a35508a211f307ec7cbf2745ea29935ea2d5e9a618ce4ba3bf8b434c56f488cc1d301081d4bd2f6f697091141d047ffcba9f36fdba0d9a36af2cb6e0bab168af29f5b30a2c2f5f4df90db38fe17e57cb2d6d3aec803f2a9f6b5236a934b9b6a89772f0216d2a6fa11fd5ee0e7d499b14dbea624f0af991a978405fe5d4983ff811d7927492d6b6de13028cf533f7c4771ad8a8f4ea58ac8e2c339b4d47190a873a495209d718861587c0b7eeb00867053195fe7454271af0eef", @ANYRESHEX=r8, @ANYRES64=r8], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=0x0], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) fcntl$lock(r11, 0x7, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r10}, 0x18) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 4m45.60538655s ago: executing program 36 (id=3422): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4m32.450973744s ago: executing program 37 (id=3702): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000400095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000400)={0x9000000c}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {&(0x7f0000000dc0)="8ad4", 0x2}], 0x2, 0x0, 0x0, 0x24040804}, 0x8800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) 4m26.655478907s ago: executing program 38 (id=3780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) open_tree(0xffffffffffffffff, &(0x7f0000008ec0)='./file0\x00', 0x1100) 4m15.759173988s ago: executing program 39 (id=3974): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0), 0x1, 0x553, &(0x7f0000001080)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000021000/0x1000)=nil, 0x1000, 0x7fffff, 0x4002011, r1, 0x81000) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 4m15.731915578s ago: executing program 40 (id=3976): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m14.150976329s ago: executing program 41 (id=3998): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 4m11.454989981s ago: executing program 42 (id=4026): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000bc0)={0x0, 0x0, "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", "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"}) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f0000001600)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) write$P9_RMKNOD(r4, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) shutdown(r4, 0x1) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1a9280, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[], 0x15) r8 = dup(r7) write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) statx(r5, &(0x7f0000000140)='./file0\x00', 0x4000, 0x8, &(0x7f00000003c0)) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$F_SET_RW_HINT(r9, 0x40c, &(0x7f0000000100)=0x3) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4m8.106802956s ago: executing program 43 (id=4058): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 4m6.935068078s ago: executing program 44 (id=4069): r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, 0x0, 0x40000) 4m6.026786216s ago: executing program 45 (id=4074): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x89, 0xa8, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x40003, 0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = geteuid() r2 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r2, 0x1) keyctl$get_persistent(0x16, r1, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000400)='net_dev_start_xmit\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x67, 0x0, 0x2, 0x1, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x25}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x9, &(0x7f0000000240)) r6 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfa, @empty}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x105, 0x6, 0xf06, 0x0, 0x8c, 0x5d, 0x1}, 0x9c) 4m2.177434391s ago: executing program 46 (id=4097): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync() bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00u\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 4m0.616756281s ago: executing program 47 (id=4108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) setreuid(0x0, 0xee00) (rerun: 64) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) (async, rerun: 32) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) (rerun: 32) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf}, 0x88b, 0xfffffffffffffffa, 0x8, 0x3, 0x0, 0x0, 0x1}) shmctl$SHM_LOCK(r1, 0xb) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3m58.863102835s ago: executing program 48 (id=4126): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300)={[{@dioread_lock}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$eJzs3UtrXFUcAPD/nUzS9KFJoRR1IYEurNROmsRHBRd1KVos6L4OyTSUTDolMylNLNgu7MaNFEHEgujOhXuXxS/gpyhooUgJunATuZM76bSZaV4zmdT5/eC259xzZ/7nzL3nzLmPIQH0rbH0n1zEyxHxdRIx0lSWj6xwbG27lUc3ptMlidXVT/5KIsnWNbZPsv8PZ5mXIuK3LyNO5TbGrS4tzxXL5dJClh+vzV8dry4tn748X5wtzZauTE5NnX1ravLdd97uWFtfv/DPdx/f++DsVydWvv3lwdE7SZyLI1lZczt24WZzZizGss9kMM49teFEB4LtJ0mvK8CODGT9fDDSMWAkBtZzLayO7HX1gC76Iu3WQJ9K9H/oU415QOPcvkPnwc+Nh++vnQBtbH9+7dpIDNfPhg6tJNn1kDXp+e5oB+KnMX798+6ddInOXYcA2NTNWxFxJp/fOP4l2fi3c2e2sM3TMbL4bS5AAZ10L53/vNFq/pNbn/9Ei/nP4RZ9dyfa9P8muQcdCNNWOv97r+X8d/2m1ehAlnuhPucbTC5dLpfSse3FiDgZgwfS/DPu53yWW7m/2q6wef6XLmn8xlwwq8eD/IEnXzNTrBV31egmD29FvNJy/pus7/+kxf5PP48LW4xxvHT31XZlm7d/XVduMa3+GPFay/2fPBH4Gfcnx+vHw3jjqNjo79vHf28Xfxvt74qHP2eJ9u0fTZrv11a3H+OH4X9L7cp2evwPJZ/W00PZuuvFWm1hImIo+Wjj+snHr23kG9unx//JE88e/1od/wfTjr3F9t8+drt50+Httb+70vbPtD/+Bzbu/+0n7n/4+fft4m9t/79ZT53M1mxl/NtqBXf7+QEAAAAAAMB+kouII5HkCuvpXK5QWHu+41gcypUr1dqpS5XFKzNR/63saAzmGne6R5qeh5jInodt5Cefyk9FxNGI+GbgYD1fmK6UZ3rdeAAAAAAAAAAAAAAAAAAAANgnDkcMt/r9f+qPgV7XDui6fK8rAPRM+/6flXTiLz0B+9KOv/+HO1sPYO+Z/0P/0v+hf+n/0L/0f+hf+j/0r+b+P9TDegB7bzvf/z+d72JFAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/hwvnz6bK68ujGdJqfuba0OFe5dnqmVJ0rzC9OF6YrC1cLs5XKbLlUmK7Mb/Z+5Url6sRkLF4fr5WqtfHq0vLF+crildrFy/PF2dLF0uCetAoAAAAAAAAAAAAAAAAAAACeL9Wl5bliuVxakJDYUSK/P6oh0ZwY2v379HpkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDH/gsAAP//3Kw5xQ==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 3m58.274617046s ago: executing program 49 (id=4135): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x58, r2, 0x1, 0x70bd28, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80080}, 0x24000000) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x100, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000890}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='GPL\x00'}, 0x90) socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_config_ext={0x800000000009, 0x5}, 0x114125, 0x2e, 0xfffffbff, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x65}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="914781cba1", 0xffe3}], 0x2}, 0x48800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$loop(&(0x7f0000000000), 0xf20000, 0x80000) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3m52.668739085s ago: executing program 6 (id=4211): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 3m52.597540586s ago: executing program 6 (id=4214): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 3m52.317621421s ago: executing program 6 (id=4218): bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2a020400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000001340)={&(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="28000000000000000100000001"], 0x28}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0x5, 0x8, 0x9, 0x3, 0x2, 0x3]}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'macvlan1\x00'}) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xdce}}, 0x0, 0x0, 0x4f, 0x0, "954f3b91f54af08eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) 3m52.296170062s ago: executing program 6 (id=4219): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300)={[{@dioread_lock}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) 3m52.224431983s ago: executing program 3 (id=4223): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 3m52.171208784s ago: executing program 3 (id=4224): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) syz_io_uring_setup(0x893, &(0x7f0000000140)={0x0, 0xaee4, 0x100, 0x1, 0x220}, &(0x7f0000000000), &(0x7f0000000340)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfff3, 0x10}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004804) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) modify_ldt$write(0x1, 0x0, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2020, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 3m52.148117645s ago: executing program 6 (id=4225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x58, r2, 0x1, 0x70bd28, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80080}, 0x24000000) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x100, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000890}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='GPL\x00'}, 0x90) socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_config_ext={0x800000000009, 0x5}, 0x114125, 0x2e, 0xfffffbff, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x65}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="914781cba1", 0xffe3}], 0x2}, 0x48800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) 3m51.732994083s ago: executing program 3 (id=4232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) rseq(&(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x8, 0xffffffffffff97b9, 0x3}, 0x2}, 0x20, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r6], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222}, 0x94) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r10, &(0x7f0000000500)=ANY=[@ANYBLOB="2b63740000dcd599857d26a56d52b15e23f65ead7f42311781fbe4bf45622d62725a71bdb245d55380921876d8173be9aae7f9defd356c41614a29fe470a56c9c2c83522f0f816f2935510ee1cb997f9ce6f87ce93726dde5c61ff1d9a535d7596bf3d79fb06e12e0b03e432c8964703047a33badc9bbd449ec22137f98cd1ffe18e8b2fc54376aac75b07837bb1e1551dfa"], 0x5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="18200000", @ANYRES16=r7], 0x18}, 0x1, 0x0, 0x0, 0x80040c4}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYRESDEC=r1], 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000640)='ext4_da_write_pages\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) syz_io_uring_setup(0x14f5, &(0x7f00000005c0)={0x0, 0xc252, 0x40, 0x3, 0x307, 0x0, r2}, &(0x7f0000000040), &(0x7f0000000180)) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r12) 3m51.663869594s ago: executing program 3 (id=4235): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300)={[{@dioread_lock}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) 3m51.506432897s ago: executing program 3 (id=4238): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync() r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00u\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800070000080000000000000100000003000000ece69d5c567632115972f45ab4fc397f86687559470584ecb76ef1bba07e5cb1d59e190c000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) 3m51.084735255s ago: executing program 6 (id=4246): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00'], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 3m51.063293786s ago: executing program 50 (id=4246): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00'], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 3m50.664787134s ago: executing program 3 (id=4254): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x248) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\xff\x01\x00\x00\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\x0f\x1b:\xff\x11~') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000280)) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0xfffffffe]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) pidfd_getfd(0xffffffffffffffff, r2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) 3m50.664449483s ago: executing program 51 (id=4254): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x248) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\xff\x01\x00\x00\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\x0f\x1b:\xff\x11~') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000280)) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0xfffffffe]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) pidfd_getfd(0xffffffffffffffff, r2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) 3m46.952991885s ago: executing program 1 (id=4333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsync(0xffffffffffffffff) 3m46.938072116s ago: executing program 1 (id=4334): r0 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x3, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0xd0, 0x25, [{{0x9, 0x4, 0x0, 0x64, 0x2, 0x0, 0x0, 0x0, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0x67, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x21, 0x81}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x9, 0x10, 0x9, 0x8, 0xd}, 0xf9, &(0x7f00000003c0)={0x5, 0xf, 0xf9, 0x6, [@generic={0xa6, 0x10, 0x1, "0aef4d17f51b366d9db2176315a3c4482a8258a10e13c9fa1c8a2df39e4da8af49386803549741c175e762da2e5c6d4a3ef909343abce07b294a2ac813c080e50e3c1cd423fc0a7df9f4e4370056a17f343611f08d7dc70a7f8530d5fc2ed19c27893246e32dcf1a8ebe7ab10f57411eb5c20b4a93ed9ceddb4ce4fd12e057350cdca71e701473dffc4ffdbfc966aa7e42df2cef54b390e8850da590e8961be09318e6"}, @generic={0x15, 0x10, 0x4, "62dd98f4a86956d927df29de4c2ad60f6373"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "52fb9862855bdcd1858dc01713d76ef2"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x82, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x0, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "6a319c7ff72c4d52fed6fc6af64bb130"}]}, 0xa, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x82c}}, {0x2d, &(0x7f0000000540)=@string={0x2d, 0x3, "b384ae81d792dadddaa3980f0429d4544c96ab97ff66b9b131442c0a12bd374402bd89764cdfc1ff40b587"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41e}}, {0x30, &(0x7f00000005c0)=@string={0x30, 0x3, "fa93092efc95e9be8172dd5b5a1b77fafb7b932b2d5e5b80a2c5293156b3f89a52f218264f7cab2f9442877931f8"}}, {0x50, &(0x7f0000000600)=@string={0x50, 0x3, "8c2b247b4704b2835246dc0997263d45a27e14679684dfedfb38d2cd8aa1816f644d83d224c95f7e61ff82b250fd1160405c7ed570ed03adc44ea4eda74bedd883fc9f3b09202919a9287964bcd0"}}, {0xc9, &(0x7f0000000680)=@string={0xc9, 0x3, "191b6508245dc35fa5b02092caa6210a2b3c85752969a73d1dfb87fd194c767e62cb756f6ee3acd1f7c20f83f2e09d1e7714ea43d089e43b120e5ef2fb9f252581a80edc55a22d8108aec2e5e9d56ff79e5956cbd5b287399257a146ea505101ee42a3b49fb034c4a2648bc6cd6d036cc9955acfcf5be8ba9ca4cc9c4046fb4b2c3454d52bf7f095a9f11457e5bb09f191d6c3462cccb0d7648e5633db77a4de55f6721c0187d3654d2bd6f5a4d0eb0c0b877d01d11377be8b21850329797b115bf97875d64fab"}}, {0x0, 0x0}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x41f}}]}) syz_usb_control_io$printer(r0, &(0x7f00000009c0)={0x14, &(0x7f00000008c0)={0x40, 0xc, 0x9e, {0x9e, 0x9, "0520958b3da7a0226570f05d8f5a3d9fd79882f0a37a94425bdcd65e91a12f23a03c09acc20e54829e6254ec58017bf9fdfdccc71938cd90497017d0f8198fb05e6be5c961822f80d9f9b1affcda3f9dfafd2ffac0a865b51fa4c24365e6c2b3e2a05245b1a65b6515eafce7c0b807ae9df0fc09c7e2807b29f268c82f9ffbeb90753450936d6bab4a3e4a5398c90ae3a3e9c970719e2eb7d1858bdf"}}, &(0x7f0000000980)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000c00)={0x34, &(0x7f0000000a00)={0x40, 0x5, 0xe, "3725bff7ee256bcae0a5661b7231"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000ac0)={0x20, 0x0, 0x87, {0x85, "ee057645d6dc20fcf9c2d65b5d811d5137928fbf08577a7b1498d1e2eb78bcc6e37bbf1c3390989c38c7e658ff86cff6e285f860a359fcd9bb175cf3d19a780e8c0287ca4ac6e2f09f3a75578816ac0c056d331920fc219c00f6b1576801830de934d6248e5089cba67bbfe305d301bf9700d8eaf8059ae7c36e12b8d56553ca3e5810dccd"}}, &(0x7f0000000b80)={0x20, 0x1, 0x1}, &(0x7f0000000bc0)={0x20, 0x0, 0x1, 0x7}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) fcntl$notify(r2, 0x402, 0x8000003d) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0xe000202b}) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) fcntl$setpipe(r7, 0x407, 0x6) 3m46.398824766s ago: executing program 1 (id=4339): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x20900, 0x1c) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(0x0, &(0x7f0000000100)={0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095", @ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sigaltstack(&(0x7f00000003c0)={&(0x7f0000000340)=""/84, 0x1, 0x54}, &(0x7f0000000400)={&(0x7f0000000c40)=""/4096, 0x0, 0x1000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) 3m46.331693367s ago: executing program 1 (id=4342): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300)={[{@dioread_lock}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x0, 0x0) 3m46.243216349s ago: executing program 1 (id=4343): bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2a020400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000001340)={&(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="28000000000000000100000001"], 0x28}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) 3m45.398002495s ago: executing program 1 (id=4357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 3m45.376487686s ago: executing program 52 (id=4357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 3m43.60512214s ago: executing program 0 (id=4390): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000", @ANYRES16=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000bc0)={0x0, 0x0, "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", "802fd08c2992cd00bd32e3988daf8b53a1e6f9a1409c0c422f30de372bc67e6d7dccbe2430912801eea5e8a335e47aae610fa122c08ac95b9d6dcdbeada5c26653375caf00318318bee63e63b8f9987443e8e771ebf7ada3bcd9bb30a68e02e98038d296ede0bbb0dee231b0e78f03bf644b3e64b278e351840d391673dd487f35839917af197553055cea488c88b7918d253c1251a11d861fef8236575340d13a4cf833cd5f471db1eb2ede8165edbbf583bbdaa11ab9b6265c5baa9e415a41058eb223bf635dac2ecc60595a8f1366016f870c296b8404c80f269fa5b9977e0745b1288763ac482749690a56becae0ed4975e63ccd34c6d8dd8b1f2ebe2d641f0e302178f6684b17c9b909e3e943f0ee0056ee5b1873eea1c19e78bb260a36939e4c1f6833441b2c357879e05c318c69afd0b67ab6d1c1eaa475dbe538f528f5071e40cc58552e894a24a6d4ad7fe219d71633a19fd7fdeabe437ba71e4ce6f57b59a2c8bca6cc9fbb332d8ccfdae2c4bfb1ced9b45616fe8b29de03d68eaea2ea4154baedbad4cc565b13add77c85ac5c6acd3056976578b1b98b53e2656cfb2762a1e2604198ac4ddfcb2d4a3b3c2975ff73c4aec02aca8dadb89c34cf98dd7bb46496a50a3aff5924acef44850ca506c531e8dd5e0536fc4b5b4e8f5d932c1da3cbe42fdf0db7cf7e9a99ddddaef3cbff84c912d6cec8446b5dae38fad29aa89860ed5d33cc9fd741aafbb58ecf347deda0585918a7836940bc8fe3b430d550e4c50f89eb146db0c213830e71474a5aacb79731d7eab1b7ed523ffd85ef4f60170f21b1c555c0012112884fe981c2a2da56cd393b1e3f43457ef30857ff12e9643fc56e9f9530cd57d02a3371eecdee1c993fd5ffd6fc7df25ef40b3d58ae83e4e26001b545bbe62f5ec27e84efbd430c01df84485742991508b86f3dcfbd090b6bfeb46e564bb7157184ec57a954e3994d989003fd72687d85592f34bb75fb0bec53805e9f0dfc3d95479ff334e41bdf67dd7af68e48396f988937c4ba8f3e1d744b5d3064612045d7e40620ebb86830f46c01b5fefc3906d5eedaaf17faebfecce4103088b9f623edc29bf3ef555683397aa6135a28fa82dfec55f7935de7a1ac03b6054673e3c39b4ba249b69f5c5d0d31938db423935068cd1a8c788cfc83331b4379ff341bc143110ade7339c54754dd55789e324c204fd0b6b40890f2c3534c368452e8f84d296736f8460068d7bf57395c4157ce4512f63569058d1a0e85cd83f02b0b75f7d3bb2597a6087f395e9831c3a0e931c21497b8a679f6db83d85a34b3d1a16640e9b5375256a7d33cac0ad6b158158f32bc90d1d34c24ad86620a3f5ca3b8a5960a553311f97b26c9e4a1aa965d2b36da416cd54e951e25709a54974ec3e5a34c1c7006bc7117fa0c4ecae2c3a9151bac98ba49721c121a091355ae99624bdc0533202916d88cf95fc37ba43bfa1567aec0219133d06b0abb1adf84e112b34da7712472629c992319898962bc3c43bf3f122ba93575d34227413d10a14483a12de946aac87f438b814c46f2124143a0786f7b0cdc781bd12534b11122177573f71c055f85e8867d931cac65dd07bb28b5dc0c1c66ce96e42ee748434ec9f119e2c820677cb46039d2a6b6a46ea1e3f9c736d04115e7061f8e5a105e8783a20a434a64803a681bd13250129552f215e7e533f10d37643f0b12021baa6be1266c605def02bfa03b4147c53709155920ab048a15928cc07c5f082ae557f052435b959dbff0c50cd92b26501f9cef905cfaab048cadd67a7a23650b0338390f612a8d308512f2c600ab68a2a359ab0ccac8615e6355e58bd398e6b343da4448f653fdf66015c617ec4b729894d6132a4c22e630a8e82cf1dbb79764e7bac61e5d889623184c94eede03379443f20f9d7e89771cc3f5c1c36b4258655d767acb38678d3a0b6efb32ce9f0ba0dbc46b4b12f753e471fcf3e3cf282996d3b2ab51eb7ec4017f56d2062af4f2607ad5f7715d4282afe3ade009b0e36dedea30a3a2bda43cd940aeb44ead4e746cb088fcbad0c35a14011889ca5bdf247f8796e73beb62114c6aea5337cd17cb6a3c77ebc3b06b7f569359074dba49c61449283521ce187ec0afad39943fb5bea15ba8f7d983066f2c56656abbe75d048084d26e91f79de4613cde047d4db6cf6fe1b5914f9e94e71d02585e1774860d72e200fc63b260d3b792754e61b19d7c875dda37707fd19569ccaeabe43c5de5c630e399f8cd983f5636655a44ebe7066247aa64dc390921516d8a68a609e8178d42dc555a7984bd9845dacd4ebcca06d30a98709032e627afcc3e3e673d89baea25bdd71e98b9697856d3998d06e8b1b3f98fefef102a90efaab5cca64852362f711b1a7b138a2bc859ac2c2495312fb3dffc71e7433514b8e51d27d020d383257dd2a0722ec8df5f7486011047eefcd1e4649da363a03f1d69d0b8ea1bfbfe13ae8a41dddc9234a0be0f0d67868cef7db9b7c9181b964e4f01c59440b4ce0fceffe32c9ae4c751d4ad90cd868d1aae1616d7c48379dcd1d66e7343448960b8ea1a4d97b7bbfef2d71fc1f89959bb4c457cf8591d0fb6ebe8491e35cac0bac762df4e2d7bcb156f545a91ba841063ad04631f73f6f3799ccc030ce0d46751f20a9a80b9c606c63aa66360516952718abae6eee81f23dbe220ed2b65a1e7a27d4aad4fe167e430dd87c492562bb2af214fc038e723417eea126183c574459e4d996ebfad4c77a74ea93b3fa4aaa980e7792180b999058aa7efbd1b6f9767ed978c2959c7aa4fd16f2027e14ff56f2b735fe9e81db26a81ac515c6769d1387185cf8490b6892227a1be743bd6e3de0d5b79e9a6fb9e1f5f41184d9f19be4bf47ad9ad5d5a86bd58708ffeb513418e283bbf57fc9dfd5d3fdc52ec375a2966b29935acfd13afe68a293bc0c1ab105b54cbf462051047223b558530270fb3e31fcf956db11a28358d779a9583b3757f7f5b230bd728b0813b42c6b9c44da2e114e432d7d2b16b93d7dad8ab088a2d8b37c1d4bf2bcf585aeee43cfec177c6f060e46dbbe2519b80f69274953b8c173e642adb24e4bf60397999aa356f779288987652325931b5bb81d42178bbc7b15c4b009444d29be65698f8bc34a4e6ad93c10d295676db331dc223edca8b6a2c626dc0a1259aeafa9176803c5e66488d7e2a16981cc107b66cd3fa0225f5f470baea247e5e737fc7b4b3174c7440e11f35143ccc9504210f294b279ac47ac3aef07aa759d61f459dbcd21055ad25863414114eb992f76ecbc53c9f50d9ee48a21762837d9a4aa1765025a8920c79abc70b5a68797fa3e3edd957db14943d8e9540d39c894d37c935bf83dd78602ac367438f4e5b0638710c78d20fef56874bdabc8f2bfa0a9b552a4765ad494cee4c138e4421db2256e38b574cc503fef75bd1813ca5606515ff61526bdfdc93cb054dd206c60a29515f8b75a9cdf33bf0f487f6359dd972a650242f584dd82e588f2e024f569b14fd99a2ad913e5c1c850d381e1d7bf4173f96ff0f00e31018302c51cfe0b76df00601ce2a6efe45ceb491fb3ca079d7d104e4483456e55b85ea69390e0784933d0bc0f66f025c528b18eb8ba01c8e5e4d4f9e279ad03be5b634122a9b8707d1b39dc9946e2bf23737fc1af560887037a2b0aad84d718dfbb742bf81139c31080e50d3c39ef1e41ccde35c8ad467d4521f7b41034c1a6f29b3aefcda8abaad4ae6a8bd878d2f13db2e736c51907e4fa558a336ce4c5424fc27b1b0b18c56c5d7f81d4b3cb471a06e0bf7ffa868593983e1329d05c7acd1f52b0daa3ff151d212127f3d35efc9067560464085cd2e29d2e15102e0c7b76f87b88992d69cda6774ac2311e3fc0a31f8e1b8861a65c32315c7e456f39091cd3d1d944bfd99038b36d669da17f6a275784ca5486bb5f9bcdc51b0673b48c41834b445471993b2f2ab3102baa0ca09785e164c9cc6850e9cc865d9f2168f67be90f671c67e4cae46e4d52882bce9bdbd0570206074985b282d6b9d985a0bef68509e8089992077218df9a96617ac4774b2f1abb27a6b381a907b8d188776b53e595daf03929f11336956408a6a4e74b534a4765cec55321383692b457a599e85c000b4a88163de37e19dc66ffb0aeba4fdeb7053c81310d45f2299939b615d03ade8b6be0a02d0d2b827c420765da3c06633baa3eb128eda2049dbb5fdb9cc4266a023ae84141b8a2f0b525e7ab3d6a7c50f03644e65c7d5710f024e5949aa537de72dcc145e879f456baa70ad405695cc347965cd3a3e63f14cd6ca2c83d57e084451f31a717c04e62db13bdce416b75424a9cd3d4f308c65518127e9f817e2a6b6a67b9e15dba9b0c5ff7ba0a8cec4db1604aae59cc8a25d236c2791bcccced6359c712f5550c819336d6cc3c8093436052f7bc639994ef292ddf29b6e92a2f99d5be5c081efcb589b3b84878ad208ca71493aa3ae2d7080b9f567243b89596b68b6a1f7735c03c72132bfb4a64bd6bdbd1aaa0809d316d992489fbc6d98e75c40abf167644518e2b0f65c328c4679d19044409372d622f13369c76d90cdcc73152f942da5c0d8c0c80763432ccca770da0c753e0364c1e2d34121abcfd8d3cf76c0b4f0a52b9fce8e5a3e03caea185e74e6d5346d970b807808b03759124cc0d9dfb9561f0c517671890bbaf58a4bde4f85d7c0489a4fe53830920294539d6fdeb67f6918b6a43888636523f32910c35e3cc1e16238f070951bf20c31760ce16f620144e827ff79c7fd841e3331451a7b7d072729112c1ac99ba8b487e13de87c4c490f792c4480f54c7dbca4e6f0b84639216acf1db731318e5213ef4962fe3c37c88751f51146a93cb151e2f88fc98bc92b39539c8a6f64b98ccaa30e9c743d47b4ca7f2a610f83f85f4b03e14bd808f3255c9f7fd5946fc87ed3e8cb9fd78094d6dfa5a5407932bdd316e1460270ea711be95fb94341ec0e81bce1b28da825838ed81c3b465fa9423d2c9673d6bf3fca88c701798ac16822f59f60cd97011533f1d7043f503245997f0dda1a79807a7dcacbe4fa2c9b512686c48637f1eb02fd09ebdcd2ca5a3896aa45d93b19ad724205e530ee28b43ad7bcaecd46a6f7f02b501f68027e5c1b05c93363c742405bd52f3b834c194b4f922907f4b23a8a6b6f9878a32df75acc05778dca3e366291498a983f059296011c3576d4878ca65ec2d8364679ce7d30ad2efae2b3247803e61c644ff45235b2d1ce6e1eb0cec466fdf880891cb5bedcd17c55d4d844a1a3b80dee64ce1df3ec7593cddea5dbe933edb4a74c6bd771d0f44f09a5f0951020bb38850d1526f96e9ae20fa03ab16b278b698f4663806573abc32708b76f4bc2d08c97"}) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f0000001600)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) write$P9_RMKNOD(r4, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) shutdown(r4, 0x1) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1a9280, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[], 0x15) r8 = dup(r7) write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) statx(r5, &(0x7f0000000140)='./file0\x00', 0x4000, 0x8, &(0x7f00000003c0)) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$F_SET_RW_HINT(r9, 0x40c, &(0x7f0000000100)=0x3) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3m43.373301995s ago: executing program 0 (id=4396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) rseq(&(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x8, 0xffffffffffff97b9, 0x3}, 0x2}, 0x20, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r6], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222}, 0x94) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r10, &(0x7f0000000500)=ANY=[@ANYBLOB="2b63740000dcd599857d26a56d52b15e23f65ead7f42311781fbe4bf45622d62725a71bdb245d55380921876d8173be9aae7f9defd356c41614a29fe470a56c9c2c83522f0f816f2935510ee1cb997f9ce6f87ce93726dde5c61ff1d9a535d7596bf3d79fb06e12e0b03e432c8964703047a33badc9bbd449ec22137f98cd1ffe18e8b2fc54376aac75b07837bb1e1551dfa"], 0x5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYRES16=r7, @ANYRESOCT=r10], 0x18}, 0x1, 0x0, 0x0, 0x80040c4}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYRESDEC=r1], 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000640)='ext4_da_write_pages\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) syz_io_uring_setup(0x14f5, &(0x7f00000005c0)={0x0, 0xc252, 0x40, 0x3, 0x307, 0x0, r2}, &(0x7f0000000040), &(0x7f0000000180)) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r12) 3m43.324798395s ago: executing program 0 (id=4397): bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2a020400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000001340)={&(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="28000000000000000100000001"], 0x28}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0x5, 0x8, 0x9, 0x3, 0x2, 0x3]}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'macvlan1\x00'}) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 3m43.305012846s ago: executing program 0 (id=4398): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300)={[{@dioread_lock}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80), 0x0, 0x0) 3m43.175143768s ago: executing program 0 (id=4399): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsync(0xffffffffffffffff) 3m42.522580211s ago: executing program 0 (id=4404): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x20900, 0x1c) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(0x0, &(0x7f0000000100)={0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095", @ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sigaltstack(&(0x7f00000003c0)={&(0x7f0000000340)=""/84, 0x1, 0x54}, &(0x7f0000000400)={&(0x7f0000000c40)=""/4096, 0x0, 0x1000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) 3m42.490581462s ago: executing program 53 (id=4404): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x20900, 0x1c) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(0x0, &(0x7f0000000100)={0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095", @ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sigaltstack(&(0x7f00000003c0)={&(0x7f0000000340)=""/84, 0x1, 0x54}, &(0x7f0000000400)={&(0x7f0000000c40)=""/4096, 0x0, 0x1000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) 3m15.468018155s ago: executing program 9 (id=4984): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="000c000e00000000ff02000000020000000000000000000000000001fe8000000000000000000000000000aafea984eaa7e8a9792800000100000000000000003741cf5cb5990659000000000000ffff0a01010100"/104], 0x68) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfff, 0x0, 0x3, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x64f1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r4, @ANYRES32=r4, @ANYRES64=r5, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000a8ffffff00000000030000080000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) uname(&(0x7f0000000500)=""/78) 3m15.422422176s ago: executing program 9 (id=4986): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000080)=0x10, 0x80800) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f00000000c0)={0x2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xc}, 0xa720, 0xa88, 0xffffffff, 0x8, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x88000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) tgkill(r1, r1, 0x21) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r3}, 0x18) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="b40100001300010226bd7000fcdbdf25ffffffff000000000000000000000000fc0100000000000000000000000000004e23fffa4e2000060200202000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="87ae000000000000090000000014000006000000000000000500000000000000080000000000000008000000000000008100000000000000030000000000000004000000000000000080090000000000ffff000000000000ffffffff00000000040000000000000002010702000000008400050000000000000000000000000000000001000004d52b0000000a000000000000000000000000000000000000010435000001033a00080000000080000001800000ac141432000000000000000000000000000004d43300000000000000fc01000000000000000000000000000104350000038d720000000000220ad51915000000760008"], 0x1b4}}, 0x80084) 3m15.267193779s ago: executing program 9 (id=4991): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x20900, 0x1c) sigaltstack(0x0, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(0x0, &(0x7f0000000100)={0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095", @ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sigaltstack(&(0x7f00000003c0)={&(0x7f0000000340)=""/84, 0x1, 0x54}, &(0x7f0000000400)={&(0x7f0000000c40)=""/4096, 0x0, 0x1000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) 3m15.19404177s ago: executing program 9 (id=4993): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xffffffff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000600020000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/27], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0xb, &(0x7f00000005c0)=[{0x401, 0x0, 0x9, 0x8cd9}, {0x2, 0x5, 0x0, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x101, 0x8, 0xe4, 0x10001}, {0xd, 0xa3, 0x0, 0xab4}, {0x3, 0x8f, 0x3, 0x4}, {0x100, 0x6, 0xa, 0x22}, {0x200, 0x9, 0x8, 0x3ff}, {0x3, 0x2c, 0x8, 0x7ff}, {0x6, 0x7, 0x3, 0x4}, {0x5, 0xd0, 0x3, 0x7}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8052, &(0x7f0000000000), 0x7, 0x4d2, &(0x7f0000000d00)="$eJzs3EFsFFUYAOB/ti0tUKQiolTUIhobjS0UFA4mBqKJB02MeNBj0xaCFGpoTYQQWRKDR0Pi3Xj06sGrejOeTLzi0cSQEENiAE9jZne23W6n27LdstJ+X7LsezNv5s2bN2/2zXtMA9i0hrJ/koj+iLgRETsjotSYYKj6dff25Yl7ty9PRDlNT/6dZJvFnSyeS/Lv7XlkuBRR+iJZWFFn9uKls+PT01MX8vjo3LlPRmcvXnrlzLnx01Onp86PHTt25PCho6+NvXr/hSrILyvXncHPZ/btffuj6+9OdNeW9+Xf9eVol6EYKjqUihfanVmH7agLJ93NUr6x/gfDqmXXf1ZdPZX2vzO6omnlARtImqZp7/Kry2mjq0uWAA+tJDp9BEBn1H7os+ff2qeoI7BlfbofHXfrePUBKCv33fwT8WxlYW0cpKfh+badhiLiw/K/32SfWKdxCACAej8dr/UEG/p/AxF76tI9ks+hDETEoxGxKyIei4jdEfF4VNM+ERFPNuy/KyLSJvkPNcSX9n9KN9dWwuay/t/r+dzWQv8v6mfBBrry2I6IWod56mB+Toajp/fUmempQ03y+PnN379abl19/y/7ZPnX+oL5cdzsbhigmxyfG2+5wA1uXY0Y7G4sf9IdkczPBCQRsTciBhdteeKfZvsdqAufeem7ffORnsXpVi5/RVo4j9aGqYr024gXq/VfjkX1v5Bj0nx+crQvpqcOjmZXwcHCPH797dp7y+W/Yvl/+LNxk7eO/ngyb1lrl9X/trrrP2rztwvlH0gikvn52tkVdlhauujaH18u+0zT6vW/JfmgEq49l342Pjd34VDEluSdpcvHFratxbPvKFfLP3yguP3vyrfJzsRTEZFdxE9HxDNRfUIcivTK/oh4LiIONDklv5x4/uNVl78viq7/dZOVf7Lw/reo/hfm65cLJOVq6oJVXWf337g3WJz/6ur/SCU0nC8pvv8li24RTY50UWCt5w8AAAAeBqWI6K8bS+qPUmlkpDoGtDu2laZnZudePjXz6fnJ6jsCA9FTqo10VceDe5La+OdAXXysIX44Hzf+umtrJT4yMTM92dGSA9srbT4pjczfC6rtP/NXe4aYgf8zr/zA5rVS+99z/QEdCPDA+f2Hzauu/ZeXSVL2P2VgY1rN77+xQNiYitr/lRa2AR4uqbYMm9r9tH/3CthYuuP9+XDB+5vABuY3HTalVb0k33Ig7S1e1RdLE0df8x12RWuHsbUgr44Esp5VR3Lf2spWtb+msGyaKN3fDnujPXV6au2n5fSetl/8aT4/1u4a/L61dhqx5tyb3zfG+tfvngQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBO/wUAAP//IGPbXQ==") open(0x0, 0x10000, 0x46) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="180100000000cc000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10004}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r5, 0x0, 0x401}, 0x11) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = dup3(r7, r6, 0x0) recvmmsg(r8, &(0x7f0000004a40)=[{{&(0x7f0000000480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000940), 0x0, &(0x7f0000000cc0)=""/229, 0xe5}, 0xffffffff}, {{&(0x7f00000009c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000dc0)=""/191, 0xbf}, {&(0x7f0000000ac0)=""/43, 0x2b}, {&(0x7f0000000e80)=""/222, 0xde}, {&(0x7f0000000f80)=""/214, 0xd6}, {&(0x7f0000000b00)=""/2, 0x2}, {&(0x7f0000001080)=""/227, 0xe3}, {&(0x7f0000001240)=""/224, 0xe0}, {&(0x7f00000042c0)=""/187, 0xbb}], 0x8, &(0x7f0000004380)=""/234, 0xea}, 0x3}, {{&(0x7f0000000c00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000b80)=""/33, 0x21}, {&(0x7f0000004cc0)=""/221, 0xdd}, {&(0x7f00000015c0)=""/204, 0xcc}, {&(0x7f0000004c00)=""/163, 0xa3}], 0x4, &(0x7f0000001880)=""/76, 0x4c}, 0xffffffff}, {{&(0x7f0000001900)=@nfc_llcp, 0x80, &(0x7f00000019c0)=[{0x0}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x3, &(0x7f0000001a00)=""/191, 0xbf}, 0x4}], 0x4, 0x40000101, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a0124f206e81e04bc06f2deb0bf200900010073797a300000000008000240000000032c000019f32fe07cd558654640a0ea326f00030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x8001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f626f696467650014000100776732000000000000000000000000000b"], 0xa8}}, 0x4000004) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x0, &(0x7f0000000440)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 3m14.941920455s ago: executing program 9 (id=4998): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0x2000c0d1) 3m14.68717394s ago: executing program 9 (id=5001): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x893, &(0x7f0000000140)={0x0, 0xaee4, 0x100, 0x1, 0x220}, 0x0, &(0x7f0000000340)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x10}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004804) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) modify_ldt$write(0x1, 0x0, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2020, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0xfff1}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 3m14.665624801s ago: executing program 54 (id=5001): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x893, &(0x7f0000000140)={0x0, 0xaee4, 0x100, 0x1, 0x220}, 0x0, &(0x7f0000000340)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x10}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004804) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) modify_ldt$write(0x1, 0x0, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2020, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0xfff1}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 4.13722105s ago: executing program 8 (id=8281): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x248) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\xff\x01\x00\x00\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\x0f\x1b:\xff\x11~') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x64}}, 0x4800) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000280)) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0xfffffffe]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) pidfd_getfd(0xffffffffffffffff, r2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) 3.237171588s ago: executing program 8 (id=8300): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf090000000000005509010000", @ANYRES16=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000bc0)={0x0, 0x0, "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", "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"}) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f0000001600)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) write$P9_RMKNOD(r4, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) shutdown(r4, 0x1) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1a9280, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f0000000400)=ANY=[]) statx(r5, &(0x7f0000000140)='./file0\x00', 0x4000, 0x8, &(0x7f00000003c0)) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000100)=0x3) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.13914645s ago: executing program 8 (id=8303): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e0001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 3.12185565s ago: executing program 8 (id=8305): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x8, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x9316e6fb81c276de, 0xf4, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0xfffffffd, 0x2}, {0x0}, 0x0, 0x0, 0x23e0c3f1a3aa70b6, 0x2}}], 0x48, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r5, @ANYRES32=r1, @ANYRES64=r2], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x59}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYRESOCT=r3, @ANYRES16=r3, @ANYRESHEX=r0, @ANYRESDEC=r6, @ANYBLOB="74ef02d14c01d6b38bcea1c662e67d2110ce6d9bd8cea6e6adac242d161b8f8734b7fd687130258f642510f9cb4776b5f50a0152e86823fe5e969e3da6603c475453d1f25ca9fd92e697b152db8fb934e290fe1340c2515508d0d470620029eb704a9b4a9cbb0a70adb36b10c92a8d78d814c04cabf224264c806d02927be0fe0ef989f6581bb7e32b386e44df0b1791f49e4ef5020cde79fc4069c5373b36a74667c734a574e8a109ea1fab3ad0346e78ba5a551529641a", @ANYBLOB="ac2dc8211e7a2ac3b7a3fc6e5b089e7ba6d33f77291aacb0fe0cc9ac6ab71a01a74a02254bc3f74fac6fc23d7d03170bc2d99f6b7ded295c4a1cf5b25fa7763f65c0a746de98aa86da4043500e182f6180aa12ba96ebee4f7770565dd35aba0c17cbd73681c09f05e6743d5f65562bed1787a5dfb84a89900e4cd2c4d8", @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000280)='.\x00', 0x25000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_WOL_SET(r11, 0x0, 0x20040000) socket$inet_tcp(0x2, 0x1, 0x0) 2.886311734s ago: executing program 2 (id=8307): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x8771, 0x6}, {0xa07, 0x401}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 2.885682394s ago: executing program 8 (id=8308): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x12010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = syz_open_dev$vcsu(0x0, 0x3, 0x400000) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x50, 0x0, "876bc9258215b0dc606c192468854ca2100a5539a65cef46fa4f63e7bba5a42bbf5febb900b4bd85f2b728a8b93ae14ff680547f900c097aa63263c410bc8cda660654bb85da11c42f4246288e0ea23f"}, 0xd8) socket(0x10, 0x3, 0x0) getpid() futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2.754525667s ago: executing program 8 (id=8311): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r0, 0x0, 0xfffffeea) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES64], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xf, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x60ff}]}) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x6a113fc2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000800000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='fsi_master_gpio_cmd_abs_addr\x00', r4}, 0x18) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e00)={{0x14}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_connect(0x0, 0x0, 0x0, 0x0) creat(0x0, 0x109) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 1.343085975s ago: executing program 7 (id=8328): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x248) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\xff\x01\x00\x00\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\x0f\x1b:\xff\x11~') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x64}}, 0x4800) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000280)) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0xfffffffe]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) pidfd_getfd(0xffffffffffffffff, r2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) 823.009154ms ago: executing program 5 (id=8349): connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) gettid() setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020000000080000"], 0x24, 0x0) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f00000009c0)='./file0\x00', 0x280b083, 0x0, 0x42, 0x0, &(0x7f00000007c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x397) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') 822.111014ms ago: executing program 5 (id=8350): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x12010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = syz_open_dev$vcsu(0x0, 0x3, 0x400000) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x50, 0x0, "876bc9258215b0dc606c192468854ca2100a5539a65cef46fa4f63e7bba5a42bbf5febb900b4bd85f2b728a8b93ae14ff680547f900c097aa63263c410bc8cda660654bb85da11c42f4246288e0ea23f"}, 0xd8) socket(0x10, 0x3, 0x0) getpid() futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 799.406055ms ago: executing program 5 (id=8351): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340), &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) io_uring_enter(r0, 0x625, 0x4c1, 0xc1, 0x0, 0x0) 779.021186ms ago: executing program 5 (id=8352): stat(&(0x7f00000000c0)='./file0\x00', 0x0) 761.925445ms ago: executing program 5 (id=8353): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xd2, 0x0, 0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5}, 0x2004c000) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000540)=@in6={0xa, 0x4e21, 0x80000000, @empty, 0x2}, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x170}}], 0x1, 0x40800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{0x2, 0xf, 0x81, 0x800}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r1, 0x47bc, 0x2, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0x10000000000ac6}, 0x18) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000206010800000000000000000000000005000400000000000900020073797a31000000000c00078008001240f2ffff08050005000a000000050001000600000014000300686173683a69702c706f72742c6970"], 0x58}}, 0x20000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 721.436647ms ago: executing program 5 (id=8354): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68850}, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/4, 0x4}, {&(0x7f0000003800)=""/4097, 0x1001}], 0x2}}], 0x1, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000300)=[{0x50, 0xff, 0x0, 0x6}, {0xff80, 0x60, 0x0, 0xfffffffe}]}) write$ppp(r1, &(0x7f0000000200)="4176adc3a0", 0x5) socketpair(0x6, 0x5, 0x6, &(0x7f00000001c0)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000021140000001100"], 0xd8}}, 0x8090) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x92}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f00000003c0)=0x0, &(0x7f0000001540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 580.901029ms ago: executing program 4 (id=8358): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendfile(r1, r0, 0x0, 0x3ffff) 575.981299ms ago: executing program 4 (id=8359): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x12010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = syz_open_dev$vcsu(0x0, 0x3, 0x400000) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=0x0, @ANYBLOB="00000000000000009a080000357500008af8ff00000000bfa200200000000007020000f8fffff3b7030008000000b70445cac69efcceb34d6e4a00000000000000", @ANYRES8, @ANYRESHEX, @ANYRES8, @ANYRESHEX], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x50, 0x0, "876bc9258215b0dc606c192468854ca2100a5539a65cef46fa4f63e7bba5a42bbf5febb900b4bd85f2b728a8b93ae14ff680547f900c097aa63263c410bc8cda660654bb85da11c42f4246288e0ea23f"}, 0xd8) socket(0x10, 0x3, 0x0) getpid() futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 538.52338ms ago: executing program 4 (id=8360): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x12010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = syz_open_dev$vcsu(0x0, 0x3, 0x400000) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x50, 0x0, "876bc9258215b0dc606c192468854ca2100a5539a65cef46fa4f63e7bba5a42bbf5febb900b4bd85f2b728a8b93ae14ff680547f900c097aa63263c410bc8cda660654bb85da11c42f4246288e0ea23f"}, 0xd8) socket(0x10, 0x3, 0x0) getpid() futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 509.26917ms ago: executing program 4 (id=8361): r0 = socket$kcm(0x10, 0x2, 0x0) mlockall(0x7) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0xa, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x54) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r6 = socket(0x10, 0x803, 0x0) recvmmsg(r6, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000280)=""/172, 0xac}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) socket$key(0xf, 0x3, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r8 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r8, 0x6e2, 0x3900, 0x3, 0x0, 0x0) 479.749171ms ago: executing program 7 (id=8362): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340), &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) io_uring_enter(r0, 0x625, 0x4c1, 0xc1, 0x0, 0x0) 452.385651ms ago: executing program 7 (id=8363): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xd2, 0x0, 0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5}, 0x2004c000) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000540)=@in6={0xa, 0x4e21, 0x80000000, @empty, 0x2}, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x170}}], 0x1, 0x40800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{0x2, 0xf, 0x81, 0x800}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r1, 0x47bc, 0x2, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0x10000000000ac6}, 0x18) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000206010800000000000000000000000005000400000000000900020073797a31000000000c00078008001240f2ffff08050005000a000000050001000600000014000300686173683a69702c706f72742c6970"], 0x58}}, 0x20000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 354.214103ms ago: executing program 7 (id=8364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000004}, 0x18) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r2, 0x2f, 0x6, 0x6, 0x6, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x40, 0x700, 0xb6, 0x7}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzszzGKwkAABdAfMpvNsrvoEWwsBAtb72DrfXIeexstvY+tpUJMxAuICO8xxcz/v5nwZv/fz682l0lyTdrTkJSf4fLbn+yrx7h0s029XiSpSkr+0t3zZZ3Mx9ExTerpV7JK358PbTN2292LPwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+EWAAD//zEFCkI=") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000400000008"], 0x48) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) unshare(0x600) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r5, 0x4, 0x0, @void}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000001640)=ANY=[@ANYBLOB="91ed540359a73a75b308cb9ac5f678106500000000009500000000000000"], &(0x7f0000000280)='GPL\x00'}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f000000c080)=ANY=[@ANYBLOB="9feb01000000000c0000000c000000040000000e000000000000850c00000000004f00"], 0x0, 0x28, 0x0, 0x1, 0x6}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x9, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0xb, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000380)='GPL\x00', 0x2, 0x1000, &(0x7f0000000500)=""/4096, 0x40f00, 0x60, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0xf, 0x2, 0xbd55}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0, r0, r0, r0, 0xffffffffffffffff], 0x0, 0x10, 0x80000001}, 0x94) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x64, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0xc0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001600)=0x14) 310.162994ms ago: executing program 4 (id=8365): stat(&(0x7f00000000c0)='./file0\x00', 0x0) 290.602155ms ago: executing program 4 (id=8366): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x800, 0x2, 0x16b}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200, 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) r5 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300), 0x1, 0x4f2, &(0x7f0000000600)="$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") 78.988729ms ago: executing program 2 (id=8368): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', 0x0) 43.076699ms ago: executing program 2 (id=8369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 42.4582ms ago: executing program 7 (id=8370): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x12010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = syz_open_dev$vcsu(0x0, 0x3, 0x400000) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0x50, 0x0, "876bc9258215b0dc606c192468854ca2100a5539a65cef46fa4f63e7bba5a42bbf5febb900b4bd85f2b728a8b93ae14ff680547f900c097aa63263c410bc8cda660654bb85da11c42f4246288e0ea23f"}, 0xd8) socket(0x10, 0x3, 0x0) getpid() futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 37.04603ms ago: executing program 2 (id=8371): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x248) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\xff\x01\x00\x00\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\x0f\x1b:\xff\x11~') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc00000000000000"], 0x64}}, 0x4800) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000280)) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0xfffffffe]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) pidfd_getfd(0xffffffffffffffff, r2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) 0s ago: executing program 7 (id=8372): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x5, 0x1, 0xd, 0x1c80, 0xfffa, 0xff4e, 0xced, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x2, 0x7, 0x9, 0xffffffff, 0x5}}, &(0x7f0000000040)=0xb0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='rxrpc_peer\x00', r5, 0x0, 0x2}, 0x18) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) ftruncate(r1, 0x2007ffc) r7 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0x100000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000002480)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002800)={r5, 0xe0, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000002580)=[0x0, 0x0], &(0x7f00000025c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4d, &(0x7f0000002600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002640), &(0x7f0000002680), 0x8, 0xe, 0x8, 0x8, &(0x7f00000026c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0x10, 0x2, &(0x7f0000000200)=@raw=[@alu={0x4, 0x0, 0xa, 0x9, 0x5, 0x1, 0x1}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x2f, &(0x7f0000002440)=""/47, 0x41100, 0x4, '\x00', r9, @sk_msg=0x7, r1, 0x8, &(0x7f00000024c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000002500)={0x0, 0x7, 0x401, 0x2}, 0x10, r10, 0xffffffffffffffff, 0x6, &(0x7f0000002840), &(0x7f0000002880)=[{0x3, 0x3, 0x5, 0x1}, {0x1, 0x2, 0xd, 0xc}, {0x0, 0x3, 0x8, 0x9}, {0x5, 0x1, 0xd, 0x5}, {0x0, 0x2, 0x3, 0x7}, {0x0, 0x2, 0xd, 0xa}], 0x10, 0x7}, 0x94) kernel console output (not intermixed with test programs): 4_ext_dirty:206: inode #13: comm syz.4.7664: mark_inode_dirty error [ 476.739650][T27970] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.744476][T27967] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #13: comm syz.4.7664: corrupted inode contents [ 476.767087][T27967] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 476.776156][T27967] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #13: comm syz.4.7664: corrupted inode contents [ 476.790199][T27967] EXT4-fs error (device loop4): ext4_truncate:4637: inode #13: comm syz.4.7664: mark_inode_dirty error [ 476.802110][T27967] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 476.811775][T27967] EXT4-fs (loop4): 1 truncate cleaned up [ 476.823042][T27967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7664'. [ 476.832806][T27967] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.7664: Failed to acquire dquot type 0 [ 476.934289][T27978] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7667'. [ 476.954042][T27978] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7667'. [ 476.984381][T27978] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7667'. [ 477.419019][T27988] 9pnet_fd: Insufficient options for proto=fd [ 477.490557][T27991] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7671'. [ 477.562222][T27995] loop4: detected capacity change from 0 to 2048 [ 477.608812][T27995] loop4: p2 p3 p7 [ 477.696536][T28003] loop7: detected capacity change from 0 to 512 [ 477.713973][T28003] ext4 filesystem being mounted at /60/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.726611][T28003] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 477.792722][T28008] siw: device registration error -23 [ 477.802923][T28009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.811693][T28009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.820508][T28009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.829906][T28009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.842093][T28009] wireguard0: entered promiscuous mode [ 477.847831][T28009] wireguard0: entered allmulticast mode [ 477.878859][T28013] loop8: detected capacity change from 0 to 512 [ 477.894143][T28013] EXT4-fs (loop8): too many log groups per flexible block group [ 477.902311][T28013] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 477.909918][T28013] EXT4-fs (loop8): mount failed [ 478.058412][T28025] loop8: detected capacity change from 0 to 128 [ 478.066024][T28025] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 478.087517][ T9055] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 478.176947][T28033] loop8: detected capacity change from 0 to 128 [ 478.184327][T28033] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 478.204810][ T9061] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 478.642544][T28040] loop7: detected capacity change from 0 to 512 [ 478.654034][T28040] EXT4-fs (loop7): too many log groups per flexible block group [ 478.662513][T28040] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 478.669534][T28040] EXT4-fs (loop7): mount failed [ 478.770200][T28044] loop7: detected capacity change from 0 to 512 [ 478.777420][T28044] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 478.791545][T28044] EXT4-fs (loop7): 1 truncate cleaned up [ 479.122766][T28051] loop8: detected capacity change from 0 to 512 [ 479.134959][T28051] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.270047][T28060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28060 comm=syz.8.7693 [ 479.288818][T28060] loop8: detected capacity change from 0 to 1024 [ 479.296217][T28060] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 479.307224][T28060] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 479.317728][T28060] JBD2: no valid journal superblock found [ 479.323592][T28060] EXT4-fs (loop8): Could not load journal inode [ 479.460354][T28071] loop2: detected capacity change from 0 to 512 [ 479.475074][T28063] loop8: detected capacity change from 0 to 1024 [ 479.482027][T28063] EXT4-fs: Ignoring removed mblk_io_submit option [ 479.482936][T28071] ext4 filesystem being mounted at /494/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.501250][T28071] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 479.681080][T28083] loop7: detected capacity change from 0 to 512 [ 479.688120][T28083] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 479.699880][T28083] EXT4-fs (loop7): 1 truncate cleaned up [ 480.167240][T28087] loop8: detected capacity change from 0 to 8192 [ 480.346573][T28094] loop5: detected capacity change from 0 to 1024 [ 480.362176][T28094] EXT4-fs: Ignoring removed bh option [ 480.369565][T28094] EXT4-fs: inline encryption not supported [ 480.377397][T28094] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 480.389099][T28094] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 480.398836][T28094] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.7704: lblock 2 mapped to illegal pblock 2 (length 1) [ 480.399066][T28096] __nla_validate_parse: 10 callbacks suppressed [ 480.399084][T28096] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7705'. [ 480.413579][T28094] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.7704: lblock 0 mapped to illegal pblock 48 (length 1) [ 480.443542][T28094] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.7704: Failed to acquire dquot type 0 [ 480.456369][T28094] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 480.471159][T28094] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.7704: mark_inode_dirty error [ 480.472997][T28096] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7705'. [ 480.484381][T28094] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 480.502194][T28094] EXT4-fs (loop5): 1 orphan inode deleted [ 480.530311][ T9096] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:63: lblock 1 mapped to illegal pblock 1 (length 1) [ 480.569995][ T9096] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:63: Failed to release dquot type 0 [ 480.585222][T26789] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 480.599665][T26789] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 480.612143][T26789] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 480.631786][T28112] loop8: detected capacity change from 0 to 128 [ 480.638915][T28112] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 480.661637][ T9053] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 480.733964][T28125] loop4: detected capacity change from 0 to 512 [ 480.748636][T28125] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.762209][T28125] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 480.784450][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 480.784468][ T29] audit: type=1400 audit(1759722391.772:48106): avc: denied { sqpoll } for pid=28120 comm="syz.5.7713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 480.833816][T28118] loop8: detected capacity change from 0 to 8192 [ 480.835890][T28136] loop4: detected capacity change from 0 to 512 [ 480.840521][ T29] audit: type=1400 audit(1759722391.772:48107): avc: denied { create } for pid=28120 comm="syz.5.7713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 480.871485][T28138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7718'. [ 480.882830][T28136] ext4 filesystem being mounted at /11/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.890834][T28138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7718'. [ 480.903292][T28136] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 480.925341][T28138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7718'. [ 480.954619][T28145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.963954][T28145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.977750][ T29] audit: type=1326 audit(1759722391.962:48108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.5.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a726beec9 code=0x7ffc0000 [ 481.001963][ T29] audit: type=1326 audit(1759722391.962:48109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.5.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a726beec9 code=0x7ffc0000 [ 481.030439][ T29] audit: type=1326 audit(1759722391.962:48110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.5.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a726beec9 code=0x7ffc0000 [ 481.054503][ T29] audit: type=1326 audit(1759722391.962:48111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.5.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a726beec9 code=0x7ffc0000 [ 481.078884][ T29] audit: type=1326 audit(1759722391.962:48112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.5.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a726beec9 code=0x7ffc0000 [ 481.103531][ T29] audit: type=1326 audit(1759722391.962:48113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.5.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a726beec9 code=0x7ffc0000 [ 481.104396][T28148] loop4: detected capacity change from 0 to 2048 [ 481.129159][ T29] audit: type=1326 audit(1759722391.962:48114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.5.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a726beec9 code=0x7ffc0000 [ 481.159390][ T29] audit: type=1326 audit(1759722391.962:48115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.5.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a726beec9 code=0x7ffc0000 [ 481.185549][T28149] siw: device registration error -23 [ 481.225854][T28148] loop4: unable to read partition table [ 481.231814][T28148] loop4: partition table beyond EOD, truncated [ 481.238087][T28148] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 481.310026][T28152] $Hÿ: renamed from bond0 (while UP) [ 481.317491][T28152] $Hÿ: entered promiscuous mode [ 481.322848][T28152] bond_slave_0: entered promiscuous mode [ 481.328966][T28152] bond_slave_1: entered promiscuous mode [ 481.535315][T28162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.544324][T28162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.555869][T28162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.565038][T28162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.576362][T28162] wireguard0: entered promiscuous mode [ 481.581995][T28162] wireguard0: entered allmulticast mode [ 481.638010][T28168] loop5: detected capacity change from 0 to 2048 [ 481.666229][T28170] loop7: detected capacity change from 0 to 512 [ 481.684410][T28170] EXT4-fs (loop7): too many log groups per flexible block group [ 481.688161][T28168] loop5: p2 p3 p7 [ 481.692665][T28170] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 481.703420][T28170] EXT4-fs (loop7): mount failed [ 481.729745][T28174] loop7: detected capacity change from 0 to 512 [ 481.756484][T28174] ext4 filesystem being mounted at /72/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.770580][T28174] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 481.867309][T28186] loop7: detected capacity change from 0 to 512 [ 481.875614][T28187] loop5: detected capacity change from 0 to 2048 [ 481.893654][T28186] EXT4-fs (loop7): too many log groups per flexible block group [ 481.902118][T28186] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 481.909376][T28186] EXT4-fs (loop7): mount failed [ 481.915635][T28187] loop5: p2 p3 p7 [ 481.929117][T28189] loop8: detected capacity change from 0 to 2048 [ 482.006573][T28196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.015247][T28196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.034733][T28189] loop8: unable to read partition table [ 482.040581][T28189] loop8: partition table beyond EOD, truncated [ 482.046991][T28189] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 482.137334][T28205] loop7: detected capacity change from 0 to 2048 [ 482.215422][T28205] loop7: unable to read partition table [ 482.221466][T28205] loop7: partition table beyond EOD, truncated [ 482.227867][T28205] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 482.523424][T28211] loop7: detected capacity change from 0 to 512 [ 482.580108][T28221] FAULT_INJECTION: forcing a failure. [ 482.580108][T28221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.593499][T28221] CPU: 0 UID: 0 PID: 28221 Comm: syz.5.7745 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 482.593532][T28221] Tainted: [W]=WARN [ 482.593540][T28221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 482.593555][T28221] Call Trace: [ 482.593563][T28221] [ 482.593590][T28221] __dump_stack+0x1d/0x30 [ 482.593633][T28221] dump_stack_lvl+0xe8/0x140 [ 482.593670][T28222] loop7: detected capacity change from 0 to 512 [ 482.593799][T28221] dump_stack+0x15/0x1b [ 482.593858][T28221] should_fail_ex+0x265/0x280 [ 482.593907][T28221] should_fail+0xb/0x20 [ 482.593929][T28221] should_fail_usercopy+0x1a/0x20 [ 482.593957][T28221] strncpy_from_user+0x25/0x230 [ 482.594049][T28221] ? kstrtouint_from_user+0x9f/0xf0 [ 482.594078][T28221] keyctl_keyring_search+0x5b/0x2e0 [ 482.594127][T28221] __se_sys_keyctl+0x2d4/0xb80 [ 482.594180][T28221] ? __rcu_read_unlock+0x4f/0x70 [ 482.594212][T28221] ? __fget_files+0x184/0x1c0 [ 482.594265][T28221] ? fput+0x8f/0xc0 [ 482.594319][T28221] __x64_sys_keyctl+0x67/0x80 [ 482.594394][T28221] x64_sys_call+0x2f7c/0x3000 [ 482.594435][T28221] do_syscall_64+0xd2/0x200 [ 482.594482][T28221] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 482.594516][T28221] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 482.594552][T28221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.594585][T28221] RIP: 0033:0x7f1a726beec9 [ 482.594613][T28221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.594639][T28221] RSP: 002b:00007f1a71127038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 482.594737][T28221] RAX: ffffffffffffffda RBX: 00007f1a72915fa0 RCX: 00007f1a726beec9 [ 482.594754][T28221] RDX: 0000200000000300 RSI: 0000000015e99eb5 RDI: 000000000000000a [ 482.594770][T28221] RBP: 00007f1a71127090 R08: 0000000000000000 R09: 0000000000000000 [ 482.594787][T28221] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.594804][T28221] R13: 00007f1a72916038 R14: 00007f1a72915fa0 R15: 00007ffe8eb3b378 [ 482.594830][T28221] [ 482.756936][T28226] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7747'. [ 482.815891][T28222] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.864989][T28234] loop7: detected capacity change from 0 to 128 [ 482.872875][T28234] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 482.899197][ T9061] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 482.968040][T28242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.977180][T28242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.038498][T28248] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7756'. [ 483.055012][T28248] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7756'. [ 483.078770][T28248] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7756'. [ 483.133606][T28253] loop8: detected capacity change from 0 to 2048 [ 483.218962][T28253] loop8: unable to read partition table [ 483.224868][T28253] loop8: partition table beyond EOD, truncated [ 483.231034][T28253] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 483.497156][T28256] loop2: detected capacity change from 0 to 512 [ 483.513498][T28256] EXT4-fs (loop2): too many log groups per flexible block group [ 483.521415][T28256] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 483.528457][T28256] EXT4-fs (loop2): mount failed [ 483.671957][T28268] loop7: detected capacity change from 0 to 512 [ 483.684604][T28268] ext4 filesystem being mounted at /89/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.700655][T28268] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 483.727160][T28273] loop5: detected capacity change from 0 to 2048 [ 483.775594][T28273] loop5: p2 p3 p7 [ 483.936385][T28289] loop7: detected capacity change from 0 to 512 [ 484.058310][T28294] loop8: detected capacity change from 0 to 512 [ 484.058554][T28289] ext4 filesystem being mounted at /93/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.080007][T28289] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 484.098654][T28294] EXT4-fs mount: 58 callbacks suppressed [ 484.098673][T28294] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.118414][T28294] ext4 filesystem being mounted at /445/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.146526][T28294] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 484.158131][T26909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.195831][T21504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.246768][T28299] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7770'. [ 484.291640][T28300] loop8: detected capacity change from 0 to 2048 [ 484.384951][T28300] loop8: unable to read partition table [ 484.399606][T28300] loop8: partition table beyond EOD, truncated [ 484.406103][T28300] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 484.456066][T28306] loop7: detected capacity change from 0 to 128 [ 484.464934][T28306] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 484.520965][ T9036] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 484.546284][T28315] loop2: detected capacity change from 0 to 512 [ 484.574809][T28315] EXT4-fs (loop2): too many log groups per flexible block group [ 484.589153][T28323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.591189][T28315] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 484.617627][T28323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.619719][T28315] EXT4-fs (loop2): mount failed [ 484.719823][T28332] loop2: detected capacity change from 0 to 512 [ 484.728819][T28332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.742192][T28332] ext4 filesystem being mounted at /503/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 484.762551][T28332] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 484.771442][T28328] loop4: detected capacity change from 0 to 512 [ 484.771566][T28326] loop8: detected capacity change from 0 to 512 [ 484.796861][T28332] ext4: Unknown parameter '0xffffffffffffffff0177777777777777777777700000000000000000000000' [ 484.809407][T28328] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 484.825448][T28326] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.839268][T18246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.839523][T28328] EXT4-fs (loop4): mount failed [ 484.849257][T28326] ext4 filesystem being mounted at /448/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.869202][T28326] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 484.923398][T21504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.000765][T28349] loop4: detected capacity change from 0 to 128 [ 485.008129][T28349] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 485.037372][ T9053] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 485.078599][T28355] loop5: detected capacity change from 0 to 128 [ 485.088703][T28355] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 485.093694][T28356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.102247][T28355] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 485.109981][T28356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.167720][T26789] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 485.185491][T28356] wireguard1: entered promiscuous mode [ 485.191356][T28356] wireguard1: entered allmulticast mode [ 485.311967][T28371] wireguard1: entered promiscuous mode [ 485.317932][T28371] wireguard1: entered allmulticast mode [ 485.450000][T28383] netlink: 'syz.4.7799': attribute type 4 has an invalid length. [ 485.614353][T28388] loop5: detected capacity change from 0 to 2048 [ 485.625891][T28391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.635128][T28391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.672238][T28388] loop5: unable to read partition table [ 485.678072][T28388] loop5: partition table beyond EOD, truncated [ 485.684424][T28388] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 485.784641][T28393] loop2: detected capacity change from 0 to 2048 [ 485.794292][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 485.794306][ T29] audit: type=1400 audit(1759722396.782:48369): avc: denied { allowed } for pid=28387 comm="syz.5.7801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 485.825994][ T29] audit: type=1400 audit(1759722396.812:48370): avc: denied { create } for pid=28387 comm="syz.5.7801" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 485.848223][ T29] audit: type=1400 audit(1759722396.812:48371): avc: denied { map } for pid=28387 comm="syz.5.7801" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 485.873065][ T29] audit: type=1400 audit(1759722396.812:48372): avc: denied { read write } for pid=28387 comm="syz.5.7801" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 485.921613][ T29] audit: type=1400 audit(1759722396.902:48373): avc: denied { create } for pid=28396 comm="syz.5.7804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 485.944697][ T29] audit: type=1400 audit(1759722396.932:48374): avc: denied { ioctl } for pid=28396 comm="syz.5.7804" path="socket:[91460]" dev="sockfs" ino=91460 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 485.970229][ T29] audit: type=1400 audit(1759722396.962:48375): avc: denied { sys_module } for pid=28396 comm="syz.5.7804" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 485.995554][T28393] loop2: unable to read partition table [ 486.001636][T28393] loop2: partition table beyond EOD, truncated [ 486.007986][T28393] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 486.030337][T28397] loop5: detected capacity change from 0 to 8192 [ 486.094290][ T29] audit: type=1400 audit(1759722397.082:48376): avc: denied { create } for pid=28396 comm="syz.5.7804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 486.134867][ T29] audit: type=1400 audit(1759722397.112:48377): avc: denied { create } for pid=28396 comm="syz.5.7804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 486.156239][ T29] audit: type=1400 audit(1759722397.112:48378): avc: denied { write } for pid=28396 comm="syz.5.7804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 486.214781][T28411] loop7: detected capacity change from 0 to 512 [ 486.257563][T28411] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.270971][T28411] ext4 filesystem being mounted at /101/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.301754][T28418] wireguard0: entered promiscuous mode [ 486.302159][T26909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.307468][T28418] wireguard0: entered allmulticast mode [ 486.338337][T28421] loop7: detected capacity change from 0 to 128 [ 486.348353][T28421] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 486.361255][T28421] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 486.390691][T26909] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 486.432512][T28429] loop4: detected capacity change from 0 to 512 [ 486.444391][T28429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.457238][T28429] ext4 filesystem being mounted at /29/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.471461][T28429] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 486.480024][T28431] loop7: detected capacity change from 0 to 2048 [ 486.497032][T27606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.512883][T28436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.521993][T28436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.537935][T28431] loop7: unable to read partition table [ 486.544111][T28431] loop7: partition table beyond EOD, truncated [ 486.550471][T28431] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 486.674661][T28439] loop7: detected capacity change from 0 to 2048 [ 486.737578][T28439] loop7: unable to read partition table [ 486.743541][T28439] loop7: partition table beyond EOD, truncated [ 486.749803][T28439] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 486.891115][T28443] loop7: detected capacity change from 0 to 8192 [ 487.076559][T28450] __nla_validate_parse: 4 callbacks suppressed [ 487.076579][T28450] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.7821'. [ 487.098430][T28453] loop7: detected capacity change from 0 to 512 [ 487.116472][T28453] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.129270][T28453] ext4 filesystem being mounted at /107/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.142145][T28448] loop2: detected capacity change from 0 to 2048 [ 487.152390][T26909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.175446][T28460] loop7: detected capacity change from 0 to 512 [ 487.180343][T28457] loop4: detected capacity change from 0 to 2048 [ 487.193659][T28460] EXT4-fs (loop7): too many log groups per flexible block group [ 487.201896][T28460] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 487.218143][T28448] loop2: unable to read partition table [ 487.220493][T28460] EXT4-fs (loop7): mount failed [ 487.223910][T28448] loop2: partition table beyond EOD, truncated [ 487.235429][T28448] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 487.239097][T28464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7825'. [ 487.275182][T28457] loop4: unable to read partition table [ 487.281081][T28457] loop4: partition table beyond EOD, truncated [ 487.287445][T28457] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 487.288010][T28464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7825'. [ 487.309933][T28467] wireguard0: entered promiscuous mode [ 487.315681][T28467] wireguard0: entered allmulticast mode [ 487.336856][T28464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7825'. [ 487.413561][T28476] loop2: detected capacity change from 0 to 512 [ 487.420500][T28476] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 487.443522][T28476] EXT4-fs (loop2): 1 truncate cleaned up [ 487.453071][T28476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.471562][T28479] loop7: detected capacity change from 0 to 512 [ 487.478228][T28473] loop5: detected capacity change from 0 to 2048 [ 487.505827][T28479] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.518873][T28479] ext4 filesystem being mounted at /110/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.531603][T28479] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 487.543018][T28473] loop5: p2 p3 p7 [ 487.552134][T26909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.589849][T28484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.599055][T28484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.056855][T28492] loop4: detected capacity change from 0 to 8192 [ 488.147463][T28496] loop5: detected capacity change from 0 to 512 [ 488.184363][T28496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.205111][T28496] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.214745][T28501] loop8: detected capacity change from 0 to 512 [ 488.234353][T28501] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.7834: casefold flag without casefold feature [ 488.259469][T28501] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.7834: couldn't read orphan inode 15 (err -117) [ 488.275346][T26789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.295296][T28501] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.306142][T28504] loop5: detected capacity change from 0 to 512 [ 488.324755][T21504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.334869][T18246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.340410][T28506] loop4: detected capacity change from 0 to 512 [ 488.352804][T28504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.366565][T28504] ext4 filesystem being mounted at /102/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.379204][T28506] EXT4-fs (loop4): too many log groups per flexible block group [ 488.388431][T28506] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 488.395907][T28506] EXT4-fs (loop4): mount failed [ 488.416931][T26789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.455272][T28521] loop4: detected capacity change from 0 to 512 [ 488.488430][T28514] loop8: detected capacity change from 0 to 8192 [ 488.554410][T28521] EXT4-fs (loop4): too many log groups per flexible block group [ 488.572690][T28521] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 488.609012][T28530] loop7: detected capacity change from 0 to 2048 [ 488.614463][T28521] EXT4-fs (loop4): mount failed [ 488.650626][T28537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.659531][T28537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.667509][T28539] wireguard0: entered promiscuous mode [ 488.673249][T28539] wireguard0: entered allmulticast mode [ 488.706185][T28530] loop7: unable to read partition table [ 488.712411][T28530] loop7: partition table beyond EOD, truncated [ 488.719070][T28530] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 488.749546][T28543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.758419][T28543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.772313][T28543] wireguard1: entered promiscuous mode [ 488.777897][T28543] wireguard1: entered allmulticast mode [ 488.855041][T28548] siw: device registration error -23 [ 489.208578][T28551] loop8: detected capacity change from 0 to 512 [ 489.216229][T28551] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 489.238663][T28551] EXT4-fs (loop8): 1 truncate cleaned up [ 489.252510][T28551] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.341222][T28559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7851'. [ 489.538627][T28571] FAULT_INJECTION: forcing a failure. [ 489.538627][T28571] name failslab, interval 1, probability 0, space 0, times 0 [ 489.552602][T28571] CPU: 0 UID: 0 PID: 28571 Comm: syz.2.7856 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 489.552661][T28571] Tainted: [W]=WARN [ 489.552668][T28571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 489.552680][T28571] Call Trace: [ 489.552687][T28571] [ 489.552719][T28571] __dump_stack+0x1d/0x30 [ 489.552764][T28571] dump_stack_lvl+0xe8/0x140 [ 489.552800][T28571] dump_stack+0x15/0x1b [ 489.552840][T28571] should_fail_ex+0x265/0x280 [ 489.552913][T28571] ? __se_sys_mount+0xef/0x2e0 [ 489.552943][T28571] should_failslab+0x8c/0xb0 [ 489.552984][T28571] __kmalloc_cache_noprof+0x4c/0x4a0 [ 489.553068][T28571] ? memdup_user+0x99/0xd0 [ 489.553098][T28571] __se_sys_mount+0xef/0x2e0 [ 489.553187][T28571] ? fput+0x8f/0xc0 [ 489.553220][T28571] ? ksys_write+0x192/0x1a0 [ 489.553244][T28571] __x64_sys_mount+0x67/0x80 [ 489.553299][T28571] x64_sys_call+0x2b51/0x3000 [ 489.553320][T28571] do_syscall_64+0xd2/0x200 [ 489.553351][T28571] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 489.553438][T28571] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 489.553464][T28571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.553530][T28571] RIP: 0033:0x7f92b62ceec9 [ 489.553550][T28571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.553569][T28571] RSP: 002b:00007f92b4d37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 489.553591][T28571] RAX: ffffffffffffffda RBX: 00007f92b6525fa0 RCX: 00007f92b62ceec9 [ 489.553607][T28571] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 489.553624][T28571] RBP: 00007f92b4d37090 R08: 0000200000000240 R09: 0000000000000000 [ 489.553639][T28571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.553724][T28571] R13: 00007f92b6526038 R14: 00007f92b6525fa0 R15: 00007ffdbf800658 [ 489.553749][T28571] [ 489.762282][T28573] loop7: detected capacity change from 0 to 512 [ 489.778460][T28573] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 489.781691][T28575] loop2: detected capacity change from 0 to 512 [ 489.799077][T28573] EXT4-fs (loop7): 1 truncate cleaned up [ 489.805634][T28573] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.819302][T28575] EXT4-fs (loop2): too many log groups per flexible block group [ 489.833539][T28575] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 489.846922][T28575] EXT4-fs (loop2): mount failed [ 489.885563][T28582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.894544][T28582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.941821][T28586] loop4: detected capacity change from 0 to 512 [ 489.953581][T28586] EXT4-fs (loop4): too many log groups per flexible block group [ 489.961559][T28586] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 489.968593][T28586] EXT4-fs (loop4): mount failed [ 490.020817][T28592] loop4: detected capacity change from 0 to 1024 [ 490.053170][T28592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.066834][T28592] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.080711][T21504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.099935][T28592] netlink: 'syz.4.7863': attribute type 16 has an invalid length. [ 490.108067][T28592] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7863'. [ 490.129726][T27606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.206139][T28605] loop4: detected capacity change from 0 to 2048 [ 490.243318][T28607] siw: device registration error -23 [ 490.254475][T28605] loop4: p2 p3 p7 [ 490.284793][T28609] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7870'. [ 490.322301][T28609] infiniband !yz!: set active [ 490.327212][T28609] infiniband !yz!: added team_slave_0 [ 490.338098][T28609] RDS/IB: !yz!: added [ 490.555987][T28620] loop2: detected capacity change from 0 to 8192 [ 490.623231][T26909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.651522][T28625] loop2: detected capacity change from 0 to 256 [ 490.659748][T28625] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 490.672928][T28625] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 490.679486][T28627] loop7: detected capacity change from 0 to 512 [ 490.694584][T28627] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 490.706295][T28627] EXT4-fs (loop7): 1 truncate cleaned up [ 490.713087][T28627] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.305179][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 491.305198][ T29] audit: type=1400 audit(1759722402.292:48646): avc: denied { audit_write } for pid=28643 comm="syz.8.7881" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 491.333698][ T29] audit: type=1107 audit(1759722402.292:48647): pid=28643 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 491.372022][T28647] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7880'. [ 491.392021][T28646] loop8: detected capacity change from 0 to 1024 [ 491.399288][T28647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7880'. [ 491.418337][T28646] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 491.429162][T28646] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 491.438922][T28646] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.7881: Failed to acquire dquot type 0 [ 491.482397][T28646] EXT4-fs (loop8): 1 truncate cleaned up [ 491.495390][T28646] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.557541][T26909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.595461][T21504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.656828][ T29] audit: type=1326 audit(1759722402.642:48648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28649 comm="syz.7.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e304feec9 code=0x7ffc0000 [ 491.685667][ T29] audit: type=1326 audit(1759722402.642:48649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28649 comm="syz.7.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e304feec9 code=0x7ffc0000 [ 491.720011][T28650] loop7: detected capacity change from 0 to 164 [ 491.727886][ T29] audit: type=1326 audit(1759722402.672:48650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28649 comm="syz.7.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e304feec9 code=0x7ffc0000 [ 491.752221][ T29] audit: type=1326 audit(1759722402.672:48651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28649 comm="syz.7.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e304feec9 code=0x7ffc0000 [ 491.776335][ T29] audit: type=1326 audit(1759722402.672:48652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28649 comm="syz.7.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e304feec9 code=0x7ffc0000 [ 491.800913][ T29] audit: type=1326 audit(1759722402.692:48653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28649 comm="syz.7.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e304fd710 code=0x7ffc0000 [ 491.855695][T28658] siw: device registration error -23 [ 491.865370][T28654] loop2: detected capacity change from 0 to 512 [ 491.924533][T28654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.943783][T28654] ext4 filesystem being mounted at /523/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.965233][T28663] loop7: detected capacity change from 0 to 512 [ 491.982928][T28654] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 492.015081][T28663] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.030819][T18246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.040678][T28663] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.085807][T26909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.153407][T28674] loop7: detected capacity change from 0 to 512 [ 492.188684][T28677] loop2: detected capacity change from 0 to 512 [ 492.196906][T28674] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.215637][T28674] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.235918][T28677] EXT4-fs (loop2): too many log groups per flexible block group [ 492.247681][T28677] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 492.254828][T28677] EXT4-fs (loop2): mount failed [ 492.321203][T28690] 9pnet_fd: Insufficient options for proto=fd [ 492.336195][T28688] loop5: detected capacity change from 0 to 2048 [ 492.345545][T28691] loop2: detected capacity change from 0 to 512 [ 492.364191][T28681] loop4: detected capacity change from 0 to 8192 [ 492.372380][T26909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.374116][T28691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.394547][T28691] ext4 filesystem being mounted at /528/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.415023][T28688] loop5: p2 p3 p7 [ 492.420332][T28691] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 492.442985][T18246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.510493][T28700] netlink: 92 bytes leftover after parsing attributes in process `syz.7.7897'. [ 492.521163][T28697] loop4: detected capacity change from 0 to 2048 [ 492.529599][T28700] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7897'. [ 492.554198][T28703] loop2: detected capacity change from 0 to 1024 [ 492.568382][T28703] EXT4-fs: Ignoring removed orlov option [ 492.587798][T28703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.643401][T28697] loop4: unable to read partition table [ 492.657387][T28697] loop4: partition table beyond EOD, truncated [ 492.663713][T28697] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 492.717292][T28706] loop5: detected capacity change from 0 to 2048 [ 492.856873][T28706] loop5: unable to read partition table [ 492.866940][T28706] loop5: partition table beyond EOD, truncated [ 492.873451][T28706] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 492.928339][T28721] loop4: detected capacity change from 0 to 128 [ 492.941570][T28721] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 492.964598][T28721] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 493.040327][T27606] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 493.063315][T28723] loop8: detected capacity change from 0 to 2048 [ 493.074044][T28728] loop5: detected capacity change from 0 to 512 [ 493.103623][T28728] EXT4-fs (loop5): too many log groups per flexible block group [ 493.115875][T28728] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 493.153767][T28735] loop4: detected capacity change from 0 to 512 [ 493.163368][T28728] EXT4-fs (loop5): mount failed [ 493.183776][T28735] EXT4-fs (loop4): too many log groups per flexible block group [ 493.208059][T28723] loop8: unable to read partition table [ 493.218357][T28735] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 493.234219][T28723] loop8: partition table beyond EOD, truncated [ 493.241019][T28723] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 493.251612][T28735] EXT4-fs (loop4): mount failed [ 493.259574][T18246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.282195][T28739] siw: device registration error -23 [ 493.310250][T28743] loop2: detected capacity change from 0 to 128 [ 493.319731][T28743] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 493.337458][T28743] ext4 filesystem being mounted at /531/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 493.393310][T18246] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 493.476574][T28761] loop2: detected capacity change from 0 to 128 [ 493.495546][T28752] loop7: detected capacity change from 0 to 8192 [ 493.506089][T28761] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 493.514530][T28761] FAT-fs (loop2): Filesystem has been set read-only [ 493.521408][T28761] syz.2.7920: attempt to access beyond end of device [ 493.521408][T28761] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 493.526933][T28765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.535992][T28761] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 493.544316][T28765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.552158][T28761] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 493.573848][T28766] syz.2.7920: attempt to access beyond end of device [ 493.573848][T28766] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 493.588131][T28766] Buffer I/O error on dev loop2, logical block 2065, async page read [ 493.597305][T28766] syz.2.7920: attempt to access beyond end of device [ 493.597305][T28766] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 493.611648][T28766] Buffer I/O error on dev loop2, logical block 2066, async page read [ 493.621027][T28766] syz.2.7920: attempt to access beyond end of device [ 493.621027][T28766] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 493.634535][T28766] Buffer I/O error on dev loop2, logical block 2067, async page read [ 493.644179][T28766] syz.2.7920: attempt to access beyond end of device [ 493.644179][T28766] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 493.657685][T28766] Buffer I/O error on dev loop2, logical block 2068, async page read [ 493.666598][T28766] syz.2.7920: attempt to access beyond end of device [ 493.666598][T28766] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 493.680503][T28766] Buffer I/O error on dev loop2, logical block 2069, async page read [ 493.688880][T28766] syz.2.7920: attempt to access beyond end of device [ 493.688880][T28766] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 493.698876][T28771] loop7: detected capacity change from 0 to 512 [ 493.702329][T28766] Buffer I/O error on dev loop2, logical block 2070, async page read [ 493.714086][T28771] EXT4-fs (loop7): too many log groups per flexible block group [ 493.717102][T28766] syz.2.7920: attempt to access beyond end of device [ 493.717102][T28766] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 493.725649][T28771] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 493.738985][T28766] Buffer I/O error on dev loop2, logical block 2071, async page read [ 493.739110][T28766] syz.2.7920: attempt to access beyond end of device [ 493.739110][T28766] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 493.746786][T28771] EXT4-fs (loop7): mount failed [ 493.754183][T28766] Buffer I/O error on dev loop2, logical block 2072, async page read [ 493.781088][T28761] syz.2.7920: attempt to access beyond end of device [ 493.781088][T28761] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 493.794899][T28761] Buffer I/O error on dev loop2, logical block 2065, async page read [ 493.804994][T28761] Buffer I/O error on dev loop2, logical block 2066, async page read [ 493.817335][T28775] netlink: 'syz.7.7924': attribute type 13 has an invalid length. [ 493.825718][T28775] netlink: 'syz.7.7924': attribute type 17 has an invalid length. [ 493.856509][T28775] $Hÿ: left promiscuous mode [ 493.861441][T28775] bond_slave_0: left promiscuous mode [ 493.867293][T28775] bond_slave_1: left promiscuous mode [ 493.874561][T28775] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 493.889445][T28775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.077701][T28780] netlink: 92 bytes leftover after parsing attributes in process `syz.7.7925'. [ 494.102443][T28780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7925'. [ 494.229804][T28785] loop5: detected capacity change from 0 to 2048 [ 494.269947][T28784] loop4: detected capacity change from 0 to 2048 [ 494.298541][T28785] loop5: p2 p3 p7 [ 494.397804][T28790] wireguard1: entered promiscuous mode [ 494.403635][T28790] wireguard1: entered allmulticast mode [ 494.404724][T28784] loop4: unable to read partition table [ 494.420378][T28784] loop4: partition table beyond EOD, truncated [ 494.427020][T28784] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 494.451852][T28795] loop2: detected capacity change from 0 to 512 [ 494.475439][T28795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.492544][T28795] ext4 filesystem being mounted at /535/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.527767][T28800] loop8: detected capacity change from 0 to 2048 [ 494.533028][T28795] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 494.584044][T18246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.598337][T28809] loop5: detected capacity change from 0 to 2048 [ 494.652661][T28814] loop2: detected capacity change from 0 to 128 [ 494.662028][T28807] loop4: detected capacity change from 0 to 8192 [ 494.669660][T28800] loop8: unable to read partition table [ 494.677639][T28814] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 494.690693][T28800] loop8: partition table beyond EOD, truncated [ 494.697329][T28800] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 494.711257][T28814] ext4 filesystem being mounted at /536/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 494.762116][T28809] loop5: unable to read partition table [ 494.792005][T28809] loop5: partition table beyond EOD, truncated [ 494.798688][T28809] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 494.821099][T18246] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 494.831647][T28817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.847897][T28817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.024741][T28832] loop2: detected capacity change from 0 to 2048 [ 495.079580][T28832] loop2: p2 p3 p7 [ 495.121166][T28839] loop7: detected capacity change from 0 to 2048 [ 495.142898][T28842] loop2: detected capacity change from 0 to 512 [ 495.159847][T28842] EXT4-fs (loop2): too many log groups per flexible block group [ 495.167784][T28842] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 495.177687][T28842] EXT4-fs (loop2): mount failed [ 495.213972][T28839] loop7: unable to read partition table [ 495.219854][T28839] loop7: partition table beyond EOD, truncated [ 495.226187][T28839] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 495.248750][T28846] loop2: detected capacity change from 0 to 512 [ 495.264334][T28846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.277365][T28846] ext4 filesystem being mounted at /540/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.290549][T28846] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 495.307335][T28849] $Hÿ: entered promiscuous mode [ 495.312526][T28849] bond_slave_0: entered promiscuous mode [ 495.319006][T28849] bond_slave_1: entered promiscuous mode [ 495.328819][T18246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.484737][T28867] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7950'. [ 495.504648][T28867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7950'. [ 495.635583][T28873] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7955'. [ 495.840732][T28880] wireguard1: entered promiscuous mode [ 495.846544][T28880] wireguard1: entered allmulticast mode [ 495.865746][T28884] loop8: detected capacity change from 0 to 512 [ 495.896045][T28884] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 495.905394][T28884] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 495.915021][T28884] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 495.923449][T28884] System zones: 0-2, 18-18, 34-35 [ 495.952808][T28871] Set syz1 is full, maxelem 65536 reached [ 495.960530][T28884] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 496.021737][T28884] batman_adv: batadv0: Adding interface: dummy0 [ 496.028275][T28884] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.084666][T28884] batman_adv: batadv0: Interface activated: dummy0 [ 496.113841][T21504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.134016][T28889] loop5: detected capacity change from 0 to 2048 [ 496.145738][T28892] loop8: detected capacity change from 0 to 512 [ 496.201682][T28889] loop5: unable to read partition table [ 496.208524][T28892] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.221743][T28889] loop5: partition table beyond EOD, truncated [ 496.228292][T28889] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 496.237254][T28892] ext4 filesystem being mounted at /476/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.268694][T21504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.303591][T28900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.315308][T28900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.350038][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 496.350060][T28904] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 496.350054][ T29] audit: type=1326 audit(1759722407.332:49098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28898 comm="syz.4.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206eaeeec9 code=0x7ffc0000 [ 496.366314][T28896] loop8: detected capacity change from 0 to 2048 [ 496.400919][ T29] audit: type=1400 audit(1759722407.352:49099): avc: denied { listen } for pid=28903 comm="syz.2.7964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 496.402075][T28906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7965'. [ 496.422106][ T29] audit: type=1326 audit(1759722407.382:49100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28898 comm="syz.4.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206eaeeec9 code=0x7ffc0000 [ 496.422145][ T29] audit: type=1326 audit(1759722407.382:49101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28898 comm="syz.4.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206eaeeec9 code=0x7ffc0000 [ 496.422173][ T29] audit: type=1326 audit(1759722407.382:49102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28898 comm="syz.4.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206eaeeec9 code=0x7ffc0000 [ 496.422263][ T29] audit: type=1326 audit(1759722407.382:49103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28898 comm="syz.4.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206eaeeec9 code=0x7ffc0000 [ 496.514027][T28909] loop5: detected capacity change from 0 to 512 [ 496.529529][ T29] audit: type=1326 audit(1759722407.382:49104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28898 comm="syz.4.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206eaeeec9 code=0x7ffc0000 [ 496.540381][T28909] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 496.560359][ T29] audit: type=1326 audit(1759722407.382:49105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28898 comm="syz.4.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206eaeeec9 code=0x7ffc0000 [ 496.594496][ T29] audit: type=1326 audit(1759722407.382:49106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28898 comm="syz.4.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206eaeeec9 code=0x7ffc0000 [ 496.618913][ T29] audit: type=1326 audit(1759722407.382:49107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28898 comm="syz.4.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206eaeeec9 code=0x7ffc0000 [ 496.647831][T28909] EXT4-fs (loop5): 1 truncate cleaned up [ 496.657975][T28909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.702145][T28896] loop8: unable to read partition table [ 496.708419][T28896] loop8: partition table beyond EOD, truncated [ 496.714866][T28896] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 497.173869][T28920] wireguard0: entered promiscuous mode [ 497.180886][T28920] wireguard0: entered allmulticast mode [ 497.294807][T28930] loop4: detected capacity change from 0 to 512 [ 497.304510][T28930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.319542][T28930] ext4 filesystem being mounted at /64/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.351906][T27606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.388909][T28928] loop2: detected capacity change from 0 to 2048 [ 497.390030][T28935] loop4: detected capacity change from 0 to 2048 [ 497.447196][T28928] loop2: p2 p3 p7 [ 497.453476][T28946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7977'. [ 497.478100][T28946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7977'. [ 497.487624][T28941] loop5: detected capacity change from 0 to 2048 [ 497.513189][T28946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7977'. [ 497.564338][T28941] loop5: unable to read partition table [ 497.584641][T28941] loop5: partition table beyond EOD, truncated [ 497.590872][T28941] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 497.921024][T28981] loop5: detected capacity change from 0 to 1024 [ 497.927922][T28981] EXT4-fs: Ignoring removed orlov option [ 498.012070][T28985] loop8: detected capacity change from 0 to 2048 [ 498.059408][T28985] loop8: p2 p3 p7 [ 498.136144][T28991] loop8: detected capacity change from 0 to 512 [ 498.154358][T28991] ext4 filesystem being mounted at /481/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.168277][T28991] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 498.211046][T28997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7994'. [ 498.332143][T29008] loop8: detected capacity change from 0 to 8192 [ 498.480141][T29018] loop7: detected capacity change from 0 to 1024 [ 498.490697][T29018] EXT4-fs: Ignoring removed bh option [ 498.496350][T29018] EXT4-fs: inline encryption not supported [ 498.512418][T29018] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 498.535094][T29018] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 498.573369][T29018] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.8001: lblock 2 mapped to illegal pblock 2 (length 1) [ 498.632873][T29029] loop5: detected capacity change from 0 to 2048 [ 498.640728][T29018] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.8001: lblock 0 mapped to illegal pblock 48 (length 1) [ 498.680721][T29018] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.8001: Failed to acquire dquot type 0 [ 498.733380][T29029] loop5: p2 p3 p7 [ 498.737696][T29018] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 498.758370][T29018] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.8001: mark_inode_dirty error [ 498.800317][T29018] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 498.830927][T29018] EXT4-fs (loop7): 1 orphan inode deleted [ 498.848475][ T9053] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 498.910841][ T9053] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:25: Failed to release dquot type 0 [ 498.932651][T26909] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 498.945968][T26909] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 498.956345][T26909] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 499.045745][T29050] loop5: detected capacity change from 0 to 2048 [ 499.075638][T29052] loop7: detected capacity change from 0 to 8192 [ 499.110760][T29062] loop2: detected capacity change from 0 to 512 [ 499.123319][T29062] EXT4-fs (loop2): too many log groups per flexible block group [ 499.132749][T29062] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 499.139813][T29062] EXT4-fs (loop2): mount failed [ 499.148018][T29050] loop5: unable to read partition table [ 499.162460][T29050] loop5: partition table beyond EOD, truncated [ 499.169076][T29050] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 499.236117][T29066] loop2: detected capacity change from 0 to 8192 [ 499.375836][T29079] loop7: detected capacity change from 0 to 1024 [ 499.415509][T29079] EXT4-fs: Ignoring removed bh option [ 499.450934][T29079] EXT4-fs: inline encryption not supported [ 499.455382][T29088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8025'. [ 499.467306][T29079] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 499.482999][T29088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8025'. [ 499.502909][T29079] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 499.517226][T29079] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.8022: lblock 2 mapped to illegal pblock 2 (length 1) [ 499.537354][T29088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8025'. [ 499.547194][T29079] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.8022: lblock 0 mapped to illegal pblock 48 (length 1) [ 499.575103][T29079] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.8022: Failed to acquire dquot type 0 [ 499.598824][T29079] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 499.613451][T29079] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.8022: mark_inode_dirty error [ 499.626441][T29079] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 499.643454][T29079] EXT4-fs (loop7): 1 orphan inode deleted [ 499.664867][ T6447] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 499.682586][ T6447] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 0 [ 499.695175][T29103] loop2: detected capacity change from 0 to 512 [ 499.703367][T26909] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 499.716714][T26909] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 499.768697][T29111] netlink: 'syz.4.8033': attribute type 4 has an invalid length. [ 499.793300][T26909] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 499.814665][T29109] loop8: detected capacity change from 0 to 2048 [ 499.829618][T29103] EXT4-fs (loop2): too many log groups per flexible block group [ 499.838217][T29103] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 499.846535][T29103] EXT4-fs (loop2): mount failed [ 499.890625][T29121] loop7: detected capacity change from 0 to 1024 [ 499.897911][T29121] EXT4-fs: Ignoring removed orlov option [ 499.908845][T29109] loop8: unable to read partition table [ 499.916604][T29109] loop8: partition table beyond EOD, truncated [ 499.922932][T29109] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 500.062522][T28803] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 500.107800][T29133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.118247][T29133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.133035][T29133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.142272][T29133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.207345][T29133] wireguard1: entered promiscuous mode [ 500.212969][T29133] wireguard1: entered allmulticast mode [ 500.377446][T29139] loop7: detected capacity change from 0 to 128 [ 500.385005][T29139] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 500.407734][ T9061] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 500.525533][T29143] loop5: detected capacity change from 0 to 1024 [ 500.533534][T29143] EXT4-fs: Ignoring removed bh option [ 500.539481][T29143] EXT4-fs: inline encryption not supported [ 500.550165][T29143] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 500.576606][T29143] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 500.598348][T29143] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.8041: lblock 2 mapped to illegal pblock 2 (length 1) [ 500.624453][T29143] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.8041: lblock 0 mapped to illegal pblock 48 (length 1) [ 500.659303][T29143] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.8041: Failed to acquire dquot type 0 [ 500.681021][T29143] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 500.702224][T29143] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.8041: mark_inode_dirty error [ 500.715188][T29143] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 500.735808][T29143] EXT4-fs (loop5): 1 orphan inode deleted [ 500.762563][ T9061] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:33: lblock 1 mapped to illegal pblock 1 (length 1) [ 500.819363][ T9061] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:33: Failed to release dquot type 0 [ 500.846914][T26789] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 500.870091][T26789] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 500.888373][T26789] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 500.943952][T29158] loop2: detected capacity change from 0 to 2048 [ 500.992757][T29161] netlink: 92 bytes leftover after parsing attributes in process `syz.5.8044'. [ 501.024490][T29161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8044'. [ 501.037229][T29158] loop2: p2 p3 p7 [ 501.284207][T29165] loop2: detected capacity change from 0 to 2048 [ 501.397542][T29165] loop2: unable to read partition table [ 501.412308][T29165] loop2: partition table beyond EOD, truncated [ 501.418883][T29165] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 501.434994][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 501.435013][ T29] audit: type=1326 audit(1759722412.412:49483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29171 comm="syz.7.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e304feec9 code=0x7ffc0000 [ 501.465330][ T29] audit: type=1326 audit(1759722412.412:49484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29171 comm="syz.7.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e304feec9 code=0x7ffc0000 [ 501.489112][ T29] audit: type=1326 audit(1759722412.412:49485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29171 comm="syz.7.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e304feec9 code=0x7ffc0000 [ 501.513834][ T29] audit: type=1326 audit(1759722412.412:49486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29171 comm="syz.7.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e304feec9 code=0x7ffc0000 [ 501.539424][ T29] audit: type=1326 audit(1759722412.412:49487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29171 comm="syz.7.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e304feec9 code=0x7ffc0000 [ 501.565566][ T29] audit: type=1326 audit(1759722412.412:49488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29171 comm="syz.7.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7e304feec9 code=0x7ffc0000 [ 501.589276][ T29] audit: type=1326 audit(1759722412.412:49489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29171 comm="syz.7.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e304feec9 code=0x7ffc0000 [ 501.613245][ T29] audit: type=1326 audit(1759722412.412:49490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29171 comm="syz.7.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7e304feec9 code=0x7ffc0000 [ 501.637528][ T29] audit: type=1326 audit(1759722412.412:49491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29171 comm="syz.7.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e304feec9 code=0x7ffc0000 [ 501.661349][ T29] audit: type=1326 audit(1759722412.412:49492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29171 comm="syz.7.8050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f7e304feec9 code=0x7ffc0000 [ 501.758261][T29179] netlink: 'syz.2.8052': attribute type 4 has an invalid length. [ 501.788621][ T3389] lo speed is unknown, defaulting to 1000 [ 501.794743][ T3389] syz2: Port: 1 Link DOWN [ 501.847831][T29187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8055'. [ 501.870596][T29187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8055'. [ 501.897587][T29187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8055'. [ 501.946829][T29196] loop5: detected capacity change from 0 to 1024 [ 501.954124][T29196] EXT4-fs: Ignoring removed orlov option [ 501.981652][T29199] siw: device registration error -23 [ 502.048785][T29207] loop5: detected capacity change from 0 to 1024 [ 502.055608][T29207] EXT4-fs: Ignoring removed orlov option [ 502.091171][T29213] siw: device registration error -23 [ 502.586072][T29220] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8066'. [ 502.595542][T29220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8066'. [ 502.864333][T29222] loop7: detected capacity change from 0 to 2048 [ 502.977799][T29225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8068'. [ 503.020781][T29225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8068'. [ 503.034733][T29222] loop7: unable to read partition table [ 503.057076][T29222] loop7: partition table beyond EOD, truncated [ 503.063548][T29222] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 503.093593][T29225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8068'. [ 503.450110][T29254] siw: device registration error -23 [ 503.463403][T29259] loop8: detected capacity change from 0 to 512 [ 503.485758][T29259] EXT4-fs (loop8): too many log groups per flexible block group [ 503.493881][T29259] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 503.501277][T29259] EXT4-fs (loop8): mount failed [ 503.525090][T29265] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8081'. [ 503.531671][T29266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.543591][T29266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.553368][T29265] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8081'. [ 503.565677][T29266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.574702][T29266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.585327][T29265] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8081'. [ 503.604678][T29266] wireguard0: entered promiscuous mode [ 503.610399][T29266] wireguard0: entered allmulticast mode [ 503.684645][T29273] loop8: detected capacity change from 0 to 8192 [ 503.816058][T29279] loop8: detected capacity change from 0 to 2048 [ 503.888289][T29279] loop8: unable to read partition table [ 503.894328][T29279] loop8: partition table beyond EOD, truncated [ 503.900858][T29279] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 504.184827][T29295] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8088'. [ 504.296745][T29304] siw: device registration error -23 [ 504.307437][T29306] netlink: 92 bytes leftover after parsing attributes in process `syz.5.8090'. [ 505.044156][T29333] siw: device registration error -23 [ 505.206658][T29342] loop7: detected capacity change from 0 to 2048 [ 505.278888][T29342] loop7: unable to read partition table [ 505.284814][T29342] loop7: partition table beyond EOD, truncated [ 505.291311][T29342] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 505.395603][T29351] loop7: detected capacity change from 0 to 512 [ 505.419005][T29351] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.455381][T29357] loop7: detected capacity change from 0 to 512 [ 505.473636][T29357] EXT4-fs (loop7): too many log groups per flexible block group [ 505.481729][T29357] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 505.489191][T29357] EXT4-fs (loop7): mount failed [ 505.693069][T29372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.701995][T29372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.351720][T29387] loop5: detected capacity change from 0 to 8192 [ 506.390891][T29391] netlink: 'syz.4.8120': attribute type 4 has an invalid length. [ 506.473249][T29393] loop5: detected capacity change from 0 to 512 [ 506.507386][T29393] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.596997][T29402] loop7: detected capacity change from 0 to 512 [ 506.613625][T29404] siw: device registration error -23 [ 506.634101][T29402] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.834253][T29422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.843093][T29422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.855761][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 506.855780][ T29] audit: type=1326 audit(1759722417.842:49604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29421 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b62ceec9 code=0x7ffc0000 [ 506.886268][ T29] audit: type=1326 audit(1759722417.842:49605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29421 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b62ceec9 code=0x7ffc0000 [ 506.910963][ T29] audit: type=1326 audit(1759722417.842:49606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29421 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b62ceec9 code=0x7ffc0000 [ 506.931218][T29413] loop8: detected capacity change from 0 to 8192 [ 506.935629][ T29] audit: type=1326 audit(1759722417.842:49607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29421 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b62ceec9 code=0x7ffc0000 [ 506.965929][ T29] audit: type=1326 audit(1759722417.842:49608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29421 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b62ceec9 code=0x7ffc0000 [ 506.990090][ T29] audit: type=1326 audit(1759722417.842:49609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29421 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b62ceec9 code=0x7ffc0000 [ 507.014153][ T29] audit: type=1326 audit(1759722417.842:49610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29421 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b62ceec9 code=0x7ffc0000 [ 507.038011][ T29] audit: type=1326 audit(1759722417.842:49611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29421 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b62ceec9 code=0x7ffc0000 [ 507.038579][T29428] loop7: detected capacity change from 0 to 512 [ 507.062141][ T29] audit: type=1326 audit(1759722417.842:49612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29421 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b62ceec9 code=0x7ffc0000 [ 507.092998][ T29] audit: type=1326 audit(1759722417.842:49613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29421 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f92b62ceec9 code=0x7ffc0000 [ 507.132641][T29428] EXT4-fs (loop7): too many log groups per flexible block group [ 507.140568][T29428] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 507.147851][T29428] EXT4-fs (loop7): mount failed [ 507.194387][T29437] loop8: detected capacity change from 0 to 2048 [ 507.226400][T29434] loop7: detected capacity change from 0 to 8192 [ 507.240381][T29437] loop8: p2 p3 p7 [ 507.269967][T29440] siw: device registration error -23 [ 507.352153][T29448] loop7: detected capacity change from 0 to 512 [ 507.364690][T29448] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.437920][T29456] loop2: detected capacity change from 0 to 128 [ 507.445048][T29456] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 507.475656][ T9087] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 507.492677][T29461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.501487][T29461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.559588][T29462] loop5: detected capacity change from 0 to 2048 [ 507.597096][T29462] loop5: p2 p3 p7 [ 507.758079][T29468] loop5: detected capacity change from 0 to 8192 [ 508.278955][T29505] loop5: detected capacity change from 0 to 8192 [ 508.297982][T29511] loop7: detected capacity change from 0 to 1024 [ 508.304923][T29511] EXT4-fs: Ignoring removed orlov option [ 508.349205][T29517] wireguard0: entered promiscuous mode [ 508.355104][T29517] wireguard0: entered allmulticast mode [ 508.373139][T29520] wireguard1: entered promiscuous mode [ 508.378747][T29520] wireguard1: entered allmulticast mode [ 508.552249][T29535] siw: device registration error -23 [ 508.862005][T29536] Set syz1 is full, maxelem 65536 reached [ 508.959257][T29550] __nla_validate_parse: 15 callbacks suppressed [ 508.959279][T29550] netlink: 92 bytes leftover after parsing attributes in process `syz.5.8167'. [ 508.984392][T29548] loop2: detected capacity change from 0 to 2048 [ 508.991193][T29550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8167'. [ 509.019188][T29552] netlink: 'syz.8.8169': attribute type 4 has an invalid length. [ 509.068087][T29548] loop2: unable to read partition table [ 509.073994][T29548] loop2: partition table beyond EOD, truncated [ 509.080278][T29548] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 509.232803][T29555] loop2: detected capacity change from 0 to 8192 [ 509.517556][T29571] wireguard0: entered promiscuous mode [ 509.524013][T29571] wireguard0: entered allmulticast mode [ 509.806068][T29583] siw: device registration error -23 [ 509.881699][T29589] loop8: detected capacity change from 0 to 2048 [ 509.920029][T29589] loop8: p2 p3 p7 [ 509.989946][T29593] siw: device registration error -23 [ 510.386090][T29596] loop2: detected capacity change from 0 to 1024 [ 510.393670][T29596] EXT4-fs: Ignoring removed bh option [ 510.399138][T29596] EXT4-fs: inline encryption not supported [ 510.405632][T29596] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 510.417032][T29596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 510.426833][T29596] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.8183: lblock 2 mapped to illegal pblock 2 (length 1) [ 510.441303][T29596] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.8183: lblock 0 mapped to illegal pblock 48 (length 1) [ 510.456024][T29596] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.8183: Failed to acquire dquot type 0 [ 510.467780][T29596] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 510.477802][T29596] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.8183: mark_inode_dirty error [ 510.489549][T29596] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 510.500200][T29596] EXT4-fs (loop2): 1 orphan inode deleted [ 510.518977][ T9087] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:55: lblock 1 mapped to illegal pblock 1 (length 1) [ 510.534121][ T9087] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:55: Failed to release dquot type 0 [ 510.548246][T18246] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 510.561607][T18246] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 510.571311][T18246] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 510.694810][T29602] loop7: detected capacity change from 0 to 8192 [ 510.741103][T29608] netlink: 92 bytes leftover after parsing attributes in process `syz.5.8187'. [ 510.750561][T29608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8187'. [ 510.848930][T29611] netlink: 'syz.8.8188': attribute type 4 has an invalid length. [ 510.931238][T29615] loop7: detected capacity change from 0 to 512 [ 510.956555][T29615] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.250754][T29624] loop7: detected capacity change from 0 to 1024 [ 511.257693][T29624] EXT4-fs: Ignoring removed orlov option [ 511.315066][T29627] loop7: detected capacity change from 0 to 512 [ 511.333616][T29627] EXT4-fs (loop7): too many log groups per flexible block group [ 511.341498][T29627] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 511.349335][T29627] EXT4-fs (loop7): mount failed [ 511.386034][T29631] loop7: detected capacity change from 0 to 512 [ 511.404660][T29631] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.442530][T29635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8196'. [ 511.460385][T29635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8196'. [ 511.562939][T29635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8196'. [ 511.626613][T29647] wireguard0: entered promiscuous mode [ 511.632290][T29647] wireguard0: entered allmulticast mode [ 511.647176][T29648] loop5: detected capacity change from 0 to 512 [ 511.656803][T29653] loop8: detected capacity change from 0 to 512 [ 511.674941][T29653] ext4 filesystem being mounted at /515/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.674964][T29648] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.842188][T29671] loop5: detected capacity change from 0 to 2048 [ 511.889247][T29671] loop5: p2 p3 p7 [ 511.934209][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 511.934285][ T29] audit: type=1326 audit(1759722422.922:49844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29678 comm="syz.8.8210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f188e0ceec9 code=0x0 [ 512.077123][T29689] netlink: 92 bytes leftover after parsing attributes in process `syz.5.8212'. [ 512.097288][T29689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8212'. [ 512.351437][ T29] audit: type=1326 audit(1759722423.332:49845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29639 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e304feec9 code=0x7ffc0000 [ 512.376043][ T29] audit: type=1326 audit(1759722423.332:49846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29639 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e304feec9 code=0x7ffc0000 [ 512.420362][T29692] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8213'. [ 512.523541][T29701] siw: device registration error -23 [ 512.568170][T29705] loop7: detected capacity change from 0 to 128 [ 512.575209][T29705] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 512.597674][ T9036] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 512.643686][T29711] loop2: detected capacity change from 0 to 1024 [ 512.684298][T29711] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.696663][T29708] loop7: detected capacity change from 0 to 8192 [ 512.726057][T29711] netlink: 'syz.2.8220': attribute type 16 has an invalid length. [ 512.757458][T29719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.766602][T29719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.783458][ T29] audit: type=1326 audit(1759722423.762:49847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.2.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b62ceec9 code=0x7ffc0000 [ 512.807728][ T29] audit: type=1326 audit(1759722423.762:49848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.2.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b62ceec9 code=0x7ffc0000 [ 512.831893][ T29] audit: type=1326 audit(1759722423.762:49849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.2.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b62ceec9 code=0x7ffc0000 [ 512.858917][ T29] audit: type=1326 audit(1759722423.762:49850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.2.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b62ceec9 code=0x7ffc0000 [ 512.882956][ T29] audit: type=1326 audit(1759722423.762:49851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.2.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b62ceec9 code=0x7ffc0000 [ 512.906968][ T29] audit: type=1326 audit(1759722423.762:49852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.2.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b62ceec9 code=0x7ffc0000 [ 512.931710][ T29] audit: type=1326 audit(1759722423.762:49853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.2.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b62ceec9 code=0x7ffc0000 [ 513.060790][T29725] loop5: detected capacity change from 0 to 512 [ 513.068550][T29725] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 513.079784][T29725] EXT4-fs (loop5): 1 truncate cleaned up [ 513.088239][T29727] loop7: detected capacity change from 0 to 1024 [ 513.095720][T29727] EXT4-fs: Ignoring removed bh option [ 513.101439][T29727] EXT4-fs: inline encryption not supported [ 513.108316][T29727] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 513.119821][T29727] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 513.129386][T29727] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.8223: lblock 2 mapped to illegal pblock 2 (length 1) [ 513.144224][T29727] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.8223: lblock 0 mapped to illegal pblock 48 (length 1) [ 513.161579][T29727] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.8223: Failed to acquire dquot type 0 [ 513.173341][T29727] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 513.182857][T29727] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.8223: mark_inode_dirty error [ 513.194563][T29727] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 513.204873][T29727] EXT4-fs (loop7): 1 orphan inode deleted [ 513.222572][ T9036] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 513.237695][ T9036] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:10: Failed to release dquot type 0 [ 513.252782][T26909] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 513.266489][T26909] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 513.276311][T26909] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 513.428814][T29750] wireguard0: entered promiscuous mode [ 513.434546][T29750] wireguard0: entered allmulticast mode [ 513.991176][T29758] loop5: detected capacity change from 0 to 8192 [ 514.212119][T29767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.221625][T29767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.224304][T29765] loop7: detected capacity change from 0 to 1024 [ 514.253002][T29765] EXT4-fs: Ignoring removed bh option [ 514.259099][T29765] EXT4-fs: inline encryption not supported [ 514.273136][T29769] loop2: detected capacity change from 0 to 512 [ 514.280436][T29769] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 514.280794][T29765] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 514.302086][T29765] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 514.311796][T29769] EXT4-fs (loop2): 1 truncate cleaned up [ 514.318079][T29769] EXT4-fs mount: 46 callbacks suppressed [ 514.318172][T29769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.338039][T29765] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.8235: lblock 2 mapped to illegal pblock 2 (length 1) [ 514.354677][T29765] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.8235: lblock 0 mapped to illegal pblock 48 (length 1) [ 514.370562][T29765] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.8235: Failed to acquire dquot type 0 [ 514.385136][T29765] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 514.397137][T29765] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.8235: mark_inode_dirty error [ 514.409448][T29765] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 514.420334][T29765] EXT4-fs (loop7): 1 orphan inode deleted [ 514.426916][T29765] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.442441][ T9087] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:55: lblock 1 mapped to illegal pblock 1 (length 1) [ 514.466851][T29774] __nla_validate_parse: 8 callbacks suppressed [ 514.466869][T29774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8238'. [ 514.495434][ T9087] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:55: Failed to release dquot type 0 [ 514.508587][T26909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.518066][T29774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8238'. [ 514.518531][T26909] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 514.541819][T26909] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 514.551965][T26909] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 514.576910][T29780] siw: device registration error -23 [ 514.578612][T29774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8238'. [ 514.851166][T29796] loop5: detected capacity change from 0 to 8192 [ 515.001171][T29806] wireguard1: entered promiscuous mode [ 515.006783][T29806] wireguard1: entered allmulticast mode [ 515.134923][T18246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.148517][T29811] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8250'. [ 515.170542][T29811] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8250'. [ 515.180668][T29813] loop2: detected capacity change from 0 to 1024 [ 515.187985][T29813] EXT4-fs: Ignoring removed bh option [ 515.193879][T29813] EXT4-fs: inline encryption not supported [ 515.200221][T29813] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 515.208921][T29811] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8250'. [ 515.218409][T29813] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 515.229673][T29813] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.8249: lblock 2 mapped to illegal pblock 2 (length 1) [ 515.244237][T29813] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.8249: lblock 0 mapped to illegal pblock 48 (length 1) [ 515.258998][T29813] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.8249: Failed to acquire dquot type 0 [ 515.270558][T29813] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 515.282857][T29813] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.8249: mark_inode_dirty error [ 515.295296][T29813] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 515.306876][T29813] EXT4-fs (loop2): 1 orphan inode deleted [ 515.313568][T29813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.316593][T29821] netlink: 'syz.8.8252': attribute type 4 has an invalid length. [ 515.326825][ T9055] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 515.350567][ T9055] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:27: Failed to release dquot type 0 [ 515.372810][T18246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.383557][T18246] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 515.397377][T18246] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 515.407165][T18246] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 515.488390][T29829] loop7: detected capacity change from 0 to 2048 [ 515.568389][T29829] loop7: unable to read partition table [ 515.574187][T29829] loop7: partition table beyond EOD, truncated [ 515.580483][T29829] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 515.782624][T29848] loop7: detected capacity change from 0 to 512 [ 515.798498][T29848] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.810240][T29838] Set syz1 is full, maxelem 65536 reached [ 515.820361][T29848] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.862432][T29852] wireguard0: entered promiscuous mode [ 515.868878][T29852] wireguard0: entered allmulticast mode [ 515.885467][T26909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.916720][T29858] loop7: detected capacity change from 0 to 1024 [ 515.923921][T29858] EXT4-fs: Ignoring removed bh option [ 515.930056][T29858] EXT4-fs: inline encryption not supported [ 515.936556][T29858] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 515.949724][T29858] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 515.958712][T29858] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.8263: lblock 2 mapped to illegal pblock 2 (length 1) [ 515.973217][T29858] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.8263: lblock 0 mapped to illegal pblock 48 (length 1) [ 515.987977][T29858] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.8263: Failed to acquire dquot type 0 [ 515.999825][T29858] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 516.009590][T29858] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.8263: mark_inode_dirty error [ 516.021229][T29858] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 516.031982][T29858] EXT4-fs (loop7): 1 orphan inode deleted [ 516.038228][T29858] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.051189][ T9061] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:33: lblock 1 mapped to illegal pblock 1 (length 1) [ 516.070297][T29863] siw: device registration error -23 [ 516.075135][ T9061] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:33: Failed to release dquot type 0 [ 516.103479][T26909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.113181][T26909] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 516.127045][T26909] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 516.137747][T26909] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 516.263405][T29880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.272554][T29880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.287310][T29880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.296258][T29880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.336322][T29880] wireguard0: entered promiscuous mode [ 516.341881][T29880] wireguard0: entered allmulticast mode [ 516.708326][T29884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.717794][T29884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.008628][T29892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8275'. [ 517.032374][T29897] netlink: 'syz.4.8276': attribute type 4 has an invalid length. [ 517.058113][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 517.058137][ T29] audit: type=1326 audit(1759722428.042:50304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz.8.8277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188e0ceec9 code=0x7ffc0000 [ 517.089361][ T29] audit: type=1326 audit(1759722428.042:50305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz.8.8277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188e0ceec9 code=0x7ffc0000 [ 517.115276][ T29] audit: type=1326 audit(1759722428.042:50306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz.8.8277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f188e0ceec9 code=0x7ffc0000 [ 517.140246][ T29] audit: type=1326 audit(1759722428.042:50307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz.8.8277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188e0ceec9 code=0x7ffc0000 [ 517.140648][T29899] loop8: detected capacity change from 0 to 1024 [ 517.164242][ T29] audit: type=1326 audit(1759722428.042:50308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz.8.8277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188e0ceec9 code=0x7ffc0000 [ 517.177066][T29899] EXT4-fs: Ignoring removed bh option [ 517.194755][ T29] audit: type=1326 audit(1759722428.042:50309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz.8.8277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f188e0ceec9 code=0x7ffc0000 [ 517.223979][ T29] audit: type=1326 audit(1759722428.042:50310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz.8.8277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188e0ceec9 code=0x7ffc0000 [ 517.224122][T29899] EXT4-fs: inline encryption not supported [ 517.248242][ T29] audit: type=1326 audit(1759722428.042:50311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz.8.8277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188e0ceec9 code=0x7ffc0000 [ 517.279382][ T29] audit: type=1326 audit(1759722428.042:50312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz.8.8277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f188e0ceec9 code=0x7ffc0000 [ 517.280684][T29899] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 517.304365][ T29] audit: type=1326 audit(1759722428.042:50313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz.8.8277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188e0ceec9 code=0x7ffc0000 [ 517.348841][T29899] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 517.354074][T29904] loop5: detected capacity change from 0 to 512 [ 517.358452][T29899] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.8277: lblock 2 mapped to illegal pblock 2 (length 1) [ 517.378303][T29899] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.8277: lblock 0 mapped to illegal pblock 48 (length 1) [ 517.384194][T29904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.393782][T29899] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.8277: Failed to acquire dquot type 0 [ 517.406023][T29904] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.431113][T29899] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 517.442249][T29899] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.8277: mark_inode_dirty error [ 517.453822][T29899] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 517.454674][T26789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.464391][T29899] EXT4-fs (loop8): 1 orphan inode deleted [ 517.473734][ T9061] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:33: lblock 1 mapped to illegal pblock 1 (length 1) [ 517.479875][T29899] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.494138][ T9061] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:33: Failed to release dquot type 0 [ 517.531831][T21504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.543874][T21504] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 517.557387][T21504] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 517.567546][T21504] EXT4-fs error (device loop8): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 517.627712][T29916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8283'. [ 517.915731][T29928] loop5: detected capacity change from 0 to 512 [ 517.933722][T29928] EXT4-fs (loop5): too many log groups per flexible block group [ 517.941926][T29928] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 517.948985][T29928] EXT4-fs (loop5): mount failed [ 518.005699][T29937] loop5: detected capacity change from 0 to 1024 [ 518.012953][T29937] EXT4-fs: Ignoring removed bh option [ 518.018791][T29937] EXT4-fs: inline encryption not supported [ 518.026041][T29937] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 518.037172][T29937] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 518.046941][T29937] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.8291: lblock 2 mapped to illegal pblock 2 (length 1) [ 518.062122][T29937] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.8291: lblock 0 mapped to illegal pblock 48 (length 1) [ 518.076902][T29937] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.8291: Failed to acquire dquot type 0 [ 518.088632][T29937] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 518.098218][T29937] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.8291: mark_inode_dirty error [ 518.111749][T29937] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 518.140643][T29937] EXT4-fs (loop5): 1 orphan inode deleted [ 518.140768][ T9036] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 518.146947][T29937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.174475][ T9036] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:10: Failed to release dquot type 0 [ 518.197733][T26789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.208081][T26789] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 518.224730][T26789] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 518.234927][T26789] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 518.258053][T29950] netlink: 'syz.5.8295': attribute type 4 has an invalid length. [ 518.308301][T29956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.317673][T29956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.557350][T29969] loop2: detected capacity change from 0 to 512 [ 518.571568][T29968] loop8: detected capacity change from 0 to 1024 [ 518.578896][T29968] EXT4-fs: Ignoring removed bh option [ 518.580183][T29969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.584480][T29968] EXT4-fs: inline encryption not supported [ 518.584924][T29968] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 518.597986][T29969] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.617424][T29968] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 518.635498][T29968] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.8305: lblock 2 mapped to illegal pblock 2 (length 1) [ 518.650389][T29968] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.8305: lblock 0 mapped to illegal pblock 48 (length 1) [ 518.665274][T29968] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.8305: Failed to acquire dquot type 0 [ 518.666503][T18246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.687607][T29968] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 518.698216][T29968] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.8305: mark_inode_dirty error [ 518.710814][T29968] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 518.721581][T29968] EXT4-fs (loop8): 1 orphan inode deleted [ 518.728397][T29968] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.741729][ T9036] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 518.757049][ T9036] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:10: Failed to release dquot type 0 [ 518.781210][T21504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.791706][T21504] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 518.805719][T21504] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 518.816055][T21504] EXT4-fs error (device loop8): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 518.984545][T29984] lo speed is unknown, defaulting to 1000 [ 519.085641][ T9036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.128538][T30006] loop5: detected capacity change from 0 to 8192 [ 519.149649][ T9036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.173312][T29984] chnl_net:caif_netlink_parms(): no params data found [ 519.237602][ T9036] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.315540][ T9036] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.341800][T29984] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.349420][T29984] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.374089][T29984] bridge_slave_0: entered allmulticast mode [ 519.381249][T29984] bridge_slave_0: entered promiscuous mode [ 519.389198][T29984] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.396649][T29984] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.404069][T29984] bridge_slave_1: entered allmulticast mode [ 519.410609][T29984] bridge_slave_1: entered promiscuous mode [ 519.440327][T29984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.475249][T29984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.490866][ T9036] bridge_slave_1: left allmulticast mode [ 519.496797][ T9036] bridge_slave_1: left promiscuous mode [ 519.502962][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.515218][ T9036] bridge_slave_0: left allmulticast mode [ 519.521092][ T9036] bridge_slave_0: left promiscuous mode [ 519.526956][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.533115][T30021] loop7: detected capacity change from 0 to 512 [ 519.544076][T30021] EXT4-fs (loop7): too many log groups per flexible block group [ 519.559157][T30021] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 519.573511][T30021] EXT4-fs (loop7): mount failed [ 519.579282][T30022] loop5: detected capacity change from 0 to 2048 [ 519.621040][T30027] loop7: detected capacity change from 0 to 1024 [ 519.629156][T30027] EXT4-fs: Ignoring removed bh option [ 519.635168][T30027] EXT4-fs: inline encryption not supported [ 519.641726][T30027] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 519.652924][T30027] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 519.661888][ T9036] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.672835][ T9036] bond_slave_0: left promiscuous mode [ 519.673053][T30027] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.8318: lblock 2 mapped to illegal pblock 2 (length 1) [ 519.685504][T30022] loop5: unable to read partition table [ 519.693554][T30027] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.8318: lblock 0 mapped to illegal pblock 48 (length 1) [ 519.699530][ T9036] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.714592][T30027] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.8318: Failed to acquire dquot type 0 [ 519.733932][T30022] loop5: partition table beyond EOD, truncated [ 519.740736][T30027] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 519.740737][T30022] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 519.750515][T30027] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.8318: mark_inode_dirty error [ 519.772627][ T9036] bond_slave_1: left promiscuous mode [ 519.778736][T30027] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 519.790644][ T9036] $Hÿ (unregistering): Released all slaves [ 519.797302][T30027] EXT4-fs (loop7): 1 orphan inode deleted [ 519.802075][T30031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.804164][T30027] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.812109][T30031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.842626][ T9055] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 519.858152][ T9055] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:27: Failed to release dquot type 0 [ 519.872797][T26909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.882729][T26909] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 519.897558][T26909] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 519.898918][T29984] team0: Port device team_slave_0 added [ 519.909218][T26909] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 519.914918][T29984] team0: Port device team_slave_1 added [ 519.931486][ T9036] tipc: Disabling bearer [ 519.936896][ T9036] tipc: Left network mode [ 519.974140][T29984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.981212][T29984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.008174][T29984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.027698][ T9036] hsr_slave_0: left promiscuous mode [ 520.031366][T30038] loop5: detected capacity change from 0 to 512 [ 520.039919][ T9036] hsr_slave_1: left promiscuous mode [ 520.046183][T30038] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 520.047581][ T9036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.055668][T30038] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 520.056699][T30038] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 520.063525][ T9036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.073681][T30038] System zones: 0-2, 18-18, 34-35 [ 520.093072][ T9036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.093177][T30038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 520.100902][ T9036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.126502][ T9036] veth1_macvtap: left promiscuous mode [ 520.132506][ T9036] veth0_macvtap: left promiscuous mode [ 520.146305][ T9036] veth1_vlan: left promiscuous mode [ 520.151846][ T9036] veth0_vlan: left promiscuous mode [ 520.158047][T26789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.180895][T30044] loop5: detected capacity change from 0 to 512 [ 520.214068][T30044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.228580][T30044] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.298681][T26789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.309701][ T9036] team0 (unregistering): Port device team_slave_1 removed [ 520.328346][ T9036] team0 (unregistering): Port device team_slave_0 removed [ 520.372997][T29984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.380177][T29984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.406522][T29984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.441170][T30057] loop5: detected capacity change from 0 to 2048 [ 520.465253][T29984] hsr_slave_0: entered promiscuous mode [ 520.471609][T29984] hsr_slave_1: entered promiscuous mode [ 520.478299][T29984] debugfs: 'hsr0' already exists in 'hsr' [ 520.484375][T29984] Cannot create hsr debugfs directory [ 520.511328][T30057] loop5: p2 p3 p7 [ 520.659980][T30080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8339'. [ 520.690882][T30089] loop5: detected capacity change from 0 to 512 [ 520.717593][T30089] EXT4-fs (loop5): too many log groups per flexible block group [ 520.725801][T30089] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 520.733124][T30089] EXT4-fs (loop5): mount failed [ 520.946976][T29984] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 520.956712][T29984] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 520.966378][T29984] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 520.977367][T29984] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 521.038242][T29984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.057915][T29984] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.071622][ T9036] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.078909][ T9036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.101391][ T9036] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.109157][ T9036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.191637][T29984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.294622][T29984] veth0_vlan: entered promiscuous mode [ 521.305216][T29984] veth1_vlan: entered promiscuous mode [ 521.325806][T29984] veth0_macvtap: entered promiscuous mode [ 521.334739][T29984] veth1_macvtap: entered promiscuous mode [ 521.346932][T29984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.364770][T29984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.383024][ T9055] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.396809][ T9055] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.409314][T30166] lo speed is unknown, defaulting to 1000 [ 521.418965][ T9055] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.428628][T30166] lo speed is unknown, defaulting to 1000 [ 521.434887][ T9055] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.445512][T30166] lo speed is unknown, defaulting to 1000 [ 521.451408][T30159] loop7: detected capacity change from 0 to 8192 [ 521.452893][T30166] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 521.469879][T30166] lo speed is unknown, defaulting to 1000 [ 521.476224][T30166] lo speed is unknown, defaulting to 1000 [ 521.482938][T30166] lo speed is unknown, defaulting to 1000 [ 521.490965][T30166] lo speed is unknown, defaulting to 1000 [ 521.497765][T30166] lo speed is unknown, defaulting to 1000 [ 521.504329][T30166] lo speed is unknown, defaulting to 1000 [ 521.523471][T30172] loop2: detected capacity change from 0 to 512 [ 521.542188][T30172] EXT4-fs (loop2): too many log groups per flexible block group [ 521.551184][T30172] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 521.558968][T30172] EXT4-fs (loop2): mount failed [ 521.637913][T30181] netlink: 12 bytes leftover after parsing attributes in process `wÞ¡ÿ'. [ 521.700517][T30185] loop7: detected capacity change from 0 to 8192 [ 521.811397][T30185] ================================================================== [ 521.819727][T30185] BUG: KCSAN: data-race in fat12_ent_put / fat_mirror_bhs [ 521.827424][T30185] [ 521.829942][T30185] write to 0xffff88812a4c5488 of 1 bytes by task 30186 on cpu 0: [ 521.838017][T30185] fat12_ent_put+0x74/0x170 [ 521.842714][T30185] fat_alloc_clusters+0x4ce/0xa80 [ 521.847864][T30185] fat_get_block+0x258/0x5e0 [ 521.852747][T30185] __block_write_begin_int+0x400/0xf90 [ 521.858798][T30185] cont_write_begin+0x5fc/0x970 [ 521.863966][T30185] fat_write_begin+0x4f/0xe0 [ 521.868941][T30185] cont_write_begin+0x1b0/0x970 [ 521.874170][T30185] fat_write_begin+0x4f/0xe0 [ 521.879063][T30185] generic_cont_expand_simple+0xad/0x150 [ 521.885414][T30185] fat_cont_expand+0x3e/0x170 [ 521.890369][T30185] fat_setattr+0x2a5/0x8a0 [ 521.894854][T30185] notify_change+0x809/0x890 [ 521.899726][T30185] do_ftruncate+0x34b/0x450 [ 521.905073][T30185] __x64_sys_ftruncate+0x68/0xc0 [ 521.910409][T30185] x64_sys_call+0x2d61/0x3000 [ 521.916001][T30185] do_syscall_64+0xd2/0x200 [ 521.920760][T30185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.927204][T30185] [ 521.929552][T30185] read to 0xffff88812a4c5400 of 512 bytes by task 30185 on cpu 1: [ 521.937712][T30185] fat_mirror_bhs+0x1df/0x320 [ 521.942495][T30185] fat_ent_write+0xd0/0xe0 [ 521.947325][T30185] fat_chain_add+0x15d/0x440 [ 521.952135][T30185] fat_get_block+0x46c/0x5e0 [ 521.956845][T30185] __block_write_begin_int+0x400/0xf90 [ 521.962330][T30185] cont_write_begin+0x5fc/0x970 [ 521.967606][T30185] fat_write_begin+0x4f/0xe0 [ 521.972226][T30185] generic_perform_write+0x184/0x490 [ 521.978023][T30185] __generic_file_write_iter+0x9e/0x120 [ 521.984063][T30185] generic_file_write_iter+0x8d/0x2f0 [ 521.990168][T30185] vfs_write+0x527/0x960 [ 521.994627][T30185] ksys_write+0xda/0x1a0 [ 521.999126][T30185] __x64_sys_write+0x40/0x50 [ 522.004005][T30185] x64_sys_call+0x2802/0x3000 [ 522.008794][T30185] do_syscall_64+0xd2/0x200 [ 522.013340][T30185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.019357][T30185] [ 522.021704][T30185] Reported by Kernel Concurrency Sanitizer on: [ 522.027896][T30185] CPU: 1 UID: 0 PID: 30185 Comm: syz.7.8372 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 522.039734][T30185] Tainted: [W]=WARN [ 522.043640][T30185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 522.053944][T30185] ================================================================== [ 522.467757][ T29] kauditd_printk_skb: 496 callbacks suppressed [ 522.467795][ T29] audit: type=1326 audit(1759722433.452:50798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30180 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffe15eec9 code=0x7ffc0000 [ 522.497613][ T29] audit: type=1326 audit(1759722433.452:50799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30180 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffe15eec9 code=0x7ffc0000