last executing test programs: 1m53.431119671s ago: executing program 3 (id=8267): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0x893}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='rxrpc_tx_data\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in6=@remote, @in6=@loopback}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x6}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xad}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, 0x154}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_ID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) setregid(0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001900010025bd7000fbcbdf250a801400ff0100040036000008001e0006000400080001"], 0x2c}, 0x1, 0x0, 0x0, 0x79f5e6f32cba3eaf}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, 0x0) 1m53.162008573s ago: executing program 3 (id=8274): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = io_uring_setup(0x4d3f, &(0x7f0000000d80)={0x0, 0xca6a, 0x40, 0x2003, 0x2f8}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480), 0x66) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x72, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r4, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[], 0x64}}, 0x0) r5 = gettid() r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone(0x80008400, &(0x7f0000000e00)="344f00805feeeabca054883ff05bfcd5a56c3a1547ae3113ef67df05fd5d768054ab2e5e6435d22c36da91daf138d55506b219938774dbcdf9786c002f782de5f1217e284a847add180c4fb8e55f615a5081e02fa1767884a2daca5f2c21cb43d8d8e3a413335386fef0f86a8911301433694b9cc16854ab9dcd27c03da70b36d20be499e3950f01966d1ebeebb6a6d7b721635c512f2bdbc977e11acbed5a957f2afcac9103a612a2ca7246529906f636947b02574836d87a0ddd251a95d6c1de1514abbea8632b798512e747", 0xcd, 0x0, &(0x7f0000000200), &(0x7f00000009c0)="db3a34addb368c988c7e7c1e2deea367981a2d96d0b530d294b9c38a16a4548147f3be365b3a446458bec7d77bcdc2c585e337aa49d82e85beabb2e1db7e3913c216a3959541b8b7081b9a8a8af2c29a1243c46d61dcc9b81bdb7d38f31e67287d4431") read$ptp(r6, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) r8 = syz_open_procfs(0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16}) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@dioread_nolock}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@errors_continue}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") chmod(&(0x7f0000000000)='./file0\x00', 0x60) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000d00)=ANY=[@ANYRES16=r8, @ANYRESDEC=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYRES8=r7, @ANYRES16=r2, @ANYRESOCT=r8], 0x53) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000100)={&(0x7f0000001600)=""/4096, 0x1000}) 1m52.289630698s ago: executing program 3 (id=8294): keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x40010, r0, 0x2000) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)="8df5863a27", 0x8600}], 0x1, 0x7a00, 0x0, 0x3) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000001240)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x39}, 0x18) r4 = socket$inet(0x2, 0x3, 0xd) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x4}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r6, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3db", 0x4f) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x7f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r3, 0x4) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080), &(0x7f0000000280)=0x4) 1m51.916006951s ago: executing program 3 (id=8303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$eJzs3U9vI2cZAPBnHHvZ7GabFDhAJUqhRdkVrJ00tI04lCIhOFUCyr2ExImiOHEUO+0mqtis+ABICAESJ7hwQeIDIKFKXDgipEpwBgECIdjCgQN00NjjNJv4X7tOnE1+P2ky78y8M8/zOprxvJ7RTACX1lMR8VJEvJOm6a2ImM7nF/IhDtpDVu/t+28sZ0MSafrKP5JI8nmdbSX5+Hq+2tWI+NqXI76ZnIzb2NvfWKrVqjv5dKW5uV1p7O3fXt9cWquuVbcWFuafX3xh8bnFuZG080ZEvPjFv3z/Oz/90ou//Mzrf3z1bze/laU1lS8/2o73qNhvYbvppdZncXSFnfcZ7DwqtlqYm+xWY+LEnHunnBMAAN1l5/gfjIhPRsStmI6J/qezAAAAwCMo/fxU/DeJSLu70mM+AAAA8AgptO6BTQrl/F6AqSgUyuX2PbwfjmuFWr3R/PRqfXdrpX2v7EyUCqvrtepcfq/wTJSSbHq+VX53+tlj0wsR8XhEfG96sjVdXq7XVsb94wcAAABcEteP9f//Pd3u/3fcHWdyAAAAwOjMjDsBAAAA4NQN2/+/dsp5AAAAAKfH9X8AAAC40L7y8svZkHbef73y2t7uRv212yvVxkZ5c3e5vFzf2S6v1etrrWf2bQ7aXq1e3/5sbO3eqTSrjWalsXc1Nuu7W81X1x94BTYAAABwhh7/+Ju/TyLi4HOTrSFzZbhVh6wGnFfFw1KSj7vs1n94rD3+8xklBZyJiXEnAIxNcdwJAGNTGncCwNglA5b3vHnnN/n4E6PNBwAAGL3Zj/a+/l/ou+ZB/8XAuWcnhsvL9X+4vFrX/4e9k7fgbeBwkZQGnQH07SA4HsBF8NDX/wdK0/eUEAAAMHJTrSEplIud6UKhXI640XotQClZXa9V5yLisYj43XTpA9n0fKtmMrDPAAAAAAAAAAAAAAAAAAAAAAAAAAC0pWkSKQAAAHChRRT+mvyq/Sz/2elnpo7/PnAl+c905K8Iff1Hr/zgzlKzuTOfzf/n4fzmD/P5z47jFwwAAAC4FAa8wP9BnX56px8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP09v03ljvDWcb9+xciYqZb/GJcbY2vRikirv0rieKR9ZKImBhB/Mnsz0e6xU+ytA5Ddos/OYL4B/f6xo+D/FPoFv/6COLDZfZmdvx5qdv+V4inWuPu+18x4oHp96v38S8Oj38TPfb/G0PGeOKtn1d6xr8X8UTxRPy7WYRO/KRH/KeHjP+Nr+/v91qW/jhituv3T9Kpkh0ho9Lc3K409vZvr28urVXXqlsLC/PPL76w+NziXGV1vVbN/3aN8d2P/eKdfu2/1iP+zID2P3Nia1e6xvjfW3fuf6hdLHWLf/PpLvF//ZO8xsn4hfy771N5OVs+2ykftMtHPfmz3z7Zr/0rPdo/6P9/s9dGj7n11W//aciqAMAZaOztbyzVatWdC1vIeulDVs7Ozs5FzgpDFCYefjt3R5pYmqZptk89xHaSGPenelgY95EJAAAYtXdP+sedCQAAAAAAAAAAAAAAAAAAAFxeZ/E4seMxDw5LySgeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBL/DwAA//9t9tlI") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1m51.592014663s ago: executing program 3 (id=8310): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000880)={'system_u:object_r:netutils_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x1}, 0x51) 1m51.471089353s ago: executing program 3 (id=8313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1m51.429786223s ago: executing program 32 (id=8313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 6.700975879s ago: executing program 2 (id=9899): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e008d2a2abd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x24}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000c41caef959cda0a426318d251318b6110000b702000001cc03a1ec0000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e200a01010200004000"/528], 0x210) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mr_alloc\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x14) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB="0000000200000000000000000000080000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180011fb6b1ec1000000000000000000a1e91600", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001280)='/proc/thread-self/attr/fscreate\x00', 0x64, 0x0) unshare(0x24040000) r9 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3, 0x800, 0x0, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) io_uring_enter(r9, 0x47f9, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180)=0x6, 0x3, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}]}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1804}, 0x60000010) 6.584850819s ago: executing program 5 (id=9901): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="4000aa000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 6.573757469s ago: executing program 2 (id=9902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xe8}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 6.558477969s ago: executing program 5 (id=9903): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200)={[], 0x40000000000}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 6.493841909s ago: executing program 5 (id=9904): keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x40010, r0, 0x2000) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)="8df5863a27", 0x8600}], 0x1, 0x7a00, 0x0, 0x3) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000001240)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x39}, 0x18) r4 = socket$inet(0x2, 0x3, 0xd) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x4}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r6, 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x7f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r3, 0x4) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080), &(0x7f0000000280)=0x4) 6.42354982s ago: executing program 5 (id=9905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xe8}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 2.528626284s ago: executing program 5 (id=9920): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x8}, {0xa, 0x0, 0x2, @loopback, 0xfffffffc}, r3, 0x400}}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r4, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x2}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x0, 0x7ffffdbd}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00'}, 0x10) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.65748329s ago: executing program 5 (id=9929): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 1.453382971s ago: executing program 0 (id=9935): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='vnet_tx_trigger\x00', r0, 0x0, 0x8ae}, 0xffffff87) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44080) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x88101) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060106000000ffff000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x1, @local, 0x4}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r7, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRES16=r6, @ANYRES8, @ANYRES16], 0x64}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) gettid() r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r8, 0x0, 0x0) 1.408590361s ago: executing program 0 (id=9936): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 1.377425811s ago: executing program 0 (id=9937): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000001600)={[{@block_validity}, {@norecovery}, {@dioread_lock}, {@noinit_itable}, {@noinit_itable}, {@block_validity}, {@user_xattr}, {@quota}, {@usrquota}]}, 0x21, 0x5ff, &(0x7f0000001680)="$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") 1.216104122s ago: executing program 4 (id=9938): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) getpeername$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000300), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @empty, @local}, &(0x7f0000000440)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000f9, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000005c0)=[0x0], &(0x7f0000000600), 0x0, 0xb7, &(0x7f0000000640)=[{}, {}], 0xffffffffffffffad, 0x0, 0x0, &(0x7f0000000680), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x8000, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000880)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 1.162563163s ago: executing program 0 (id=9939): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) 1.129170343s ago: executing program 0 (id=9940): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x8}, {0xa, 0x0, 0x2, @loopback, 0xfffffffc}, r3, 0x400}}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r4, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x2}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x0, 0x7ffffdbd}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00'}, 0x10) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 710.593895ms ago: executing program 4 (id=9941): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) 668.608835ms ago: executing program 4 (id=9942): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4ffffff8000000069108a000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x1a, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x55bb}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', r1, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x2, 0xe, 0x8, 0x10001}, 0x10, 0x2906, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000002c0)=[{0x5, 0x1, 0x2, 0xa}, {0x2, 0x5, 0x1, 0x8}, {0x5, 0x5, 0xe, 0x4}, {0x2, 0x1, 0x9, 0xa}, {0x2, 0x2, 0xd, 0xc}, {0x0, 0x1, 0xb, 0x4}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0xa96) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) memfd_secret(0x0) 635.631346ms ago: executing program 4 (id=9944): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x18, 0x0, 0x50dc85624ea6cf59, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000840), 0x81}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000140)={0x2, 0x4, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @fadd={0x58, 0x114, 0x6, {{0x10000, 0xf}, &(0x7f00000000c0), &(0x7f00000001c0)=0x1, 0xba0, 0xffffffffffffffff, 0x1000000005, 0x4, 0x0, 0xfffffffffffffff9}}], 0xa0}, 0x0) 619.768526ms ago: executing program 4 (id=9945): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) 604.761146ms ago: executing program 4 (id=9946): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='vnet_tx_trigger\x00', r0, 0x0, 0x8ae}, 0xffffff87) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44080) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x88101) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060106000000ffff000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x1, @local, 0x4}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xf, r6, 0x0, &(0x7f0000000a40)="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") ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r7, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRES16=r6, @ANYRES8, @ANYRES16], 0x64}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) gettid() r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r8, 0x0, 0x0) 279.505748ms ago: executing program 0 (id=9949): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000001c0)=[0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0xbe, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x6, 0xb, 0x3, 0x75fd, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x700, 0x8, 0x0, 0x41ce}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000700)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000f80)=@getpolicy={0x420, 0x15, 0x2, 0x70bd2d, 0x25dfdbff, {{@in=@loopback, @in6=@empty, 0x4e22, 0xfff7, 0x4e21, 0x100, 0x2, 0x20, 0x20, 0x0, r4, 0xee00}, 0x6e6bba}, [@sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x3, 0x4e23, 0x101, 0x2, 0x120, 0x20, 0x32, r8, r9}, {@in=@rand_addr=0x64010100, 0x4d3, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x8, 0x8, 0xfffffffffffffffd, 0x4, 0xc, 0x8000, 0x8, 0x4}, {0xad, 0xa, 0x5, 0x800}, {0xffff, 0x8000, 0x1}, 0x70bd2c, 0x3504, 0x2, 0x0, 0x3, 0x57}}, @algo_crypt={0xc5, 0x2, {{'cryptd(ecb(des3_ede))\x00'}, 0x3e8, "8146848440bc99004f9ea0849c4374f5817d5945b30706fb00f69fb922025c0e3895a68e555cede89a1ca35a7f9d93c9971885c045b55b9404349b75b400d3f9dcbfb18b8d193528bea23e7d31f16dc4b86a4773a47769bf4e1046093c02019772a9d3e9dfacb8ab51c3c2f47c28b30e97f417269d468d0fe1bd6f5e23"}}, @algo_auth_trunc={0xdd, 0x14, {{'sha384-generic\x00'}, 0x488, 0x60, "00a7852093fff5ffd617ba8dc4427d783e064feb924f69b7cb6886a41798e8c27d859916505309c4c87b6b6c00cb8e87070acb002526d5860c76468a5e989938278f8ca953f0a104f6c998efd631a1016166c6f6b7b6aa821ab34b63bd885ff4393f3e8b797099ac269736319ebbfa04e82ee440ffee63ceddb4871edce2f97c0167023ed5a081e882edc11bfc525956c2"}}, @algo_aead={0x7f, 0x12, {{'morus1280-sse2\x00'}, 0x198, 0x60, "95bea24fbcef616730727ded88245454d5623e136b1ac8412c10c8c1e786572e7b0a2db585f88ab97604210b592d7e66647bd3"}}, @tfcpad={0x8, 0x16, 0xffffff03}, @algo_crypt={0x9f, 0x2, {{'xts(ecb(cast5))\x00'}, 0x2b8, "b8f5ab85a1495c71871f48830f96e8d645a0a1c1f9d5c6bbfa041ef4e1cef3d731738364527a87dea97318d5eaf534e78f5567b38fa04f1b06b38ec267c64de7ab03633a9ad9b985bdd0f787e9a8e911932446a83ffdea"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @srcaddr={0x14, 0xd, @in=@empty}]}, 0x420}, 0x1, 0x0, 0x0, 0x800c}, 0x20010845) syz_open_dev$sg(&(0x7f00000007c0), 0x6, 0x2c940) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r11, 0x0, 0x5}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r12 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r12, 0x29, 0x16, &(0x7f0000fcb000), 0x4) ioctl$VT_DISALLOCATE(r10, 0x5608) 230.100208ms ago: executing program 1 (id=9950): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 226.634638ms ago: executing program 2 (id=9951): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e008d2a2abd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x24}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000c41caef959cda0a426318d251318b6110000b702000001cc03a1ec0000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e200a01010200004000"/528], 0x210) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mr_alloc\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000200000000000000000000080000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001280)='/proc/thread-self/attr/fscreate\x00', 0x64, 0x0) unshare(0x24040000) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3, 0x800, 0x0, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) io_uring_enter(r8, 0x47f9, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180)=0x6, 0x3, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}]}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1804}, 0x60000010) 210.937419ms ago: executing program 1 (id=9952): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) getpeername$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000300), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @empty, @local}, &(0x7f0000000440)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000f9, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000005c0)=[0x0], &(0x7f0000000600), 0x0, 0xb7, &(0x7f0000000640)=[{}, {}], 0xffffffffffffffad, 0x0, 0x0, &(0x7f0000000680), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x8000, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000880)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 173.424179ms ago: executing program 1 (id=9953): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) 137.669269ms ago: executing program 1 (id=9954): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4ffffff8000000069108a000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x1a, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x55bb}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', r1, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x2, 0xe, 0x8, 0x10001}, 0x10, 0x2906, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000002c0)=[{0x5, 0x1, 0x2, 0xa}, {0x2, 0x5, 0x1, 0x8}, {0x5, 0x5, 0xe, 0x4}, {0x2, 0x1, 0x9, 0xa}, {0x2, 0x2, 0xd, 0xc}, {0x0, 0x1, 0xb, 0x4}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0xa96) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) memfd_secret(0x0) 136.805629ms ago: executing program 2 (id=9955): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x18, 0x0, 0x50dc85624ea6cf59, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000840), 0x81}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000140)={0x2, 0x4, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @fadd={0x58, 0x114, 0x6, {{0x10000, 0xf}, &(0x7f00000000c0), &(0x7f00000001c0)=0x1, 0xba0, 0xffffffffffffffff, 0x1000000005, 0x4, 0x0, 0xfffffffffffffff9}}], 0xa0}, 0x0) 115.114979ms ago: executing program 2 (id=9956): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) 97.148559ms ago: executing program 1 (id=9957): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e008d2a2abd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x24}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000c41caef959cda0a426318d251318b6110000b702000001cc03a1ec0000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e200a01010200004000"/528], 0x210) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mr_alloc\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000200000000000000000000080000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001280)='/proc/thread-self/attr/fscreate\x00', 0x64, 0x0) unshare(0x24040000) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3, 0x800, 0x0, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) io_uring_enter(r8, 0x47f9, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180)=0x6, 0x3, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}]}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1804}, 0x60000010) 94.574949ms ago: executing program 2 (id=9958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r1, &(0x7f0000000740)=""/239, 0xef) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b000000000000000000000000000000000000001a2ed4f48fb3c6d9bdeaccd293b2031aeb4e79dfc3ba88728855dd68e52d1b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x1, @ANYRESDEC=0x0, @ANYRES64=r2, @ANYRES32, @ANYRES16=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x15, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f00000010c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="5dae10127b53d6da7e163f2bb2bbbdefd5fb41af920b7e8c8755152d280ed7f4daff295356d345dfaa12fbdcf0c2c094afb76414bd8c68a160187ada46f43384c0c9440479972422d2f320a2177b8e66fd46cc446b71175e48c0ebc8c4f1043de1e2158a6e3f2f41356fa44190c1eb676463962002b2b667afe433a73f3a37c9743d21bcf50d7ab4fdcba0fa6fad82304c22ae85f5779e401ae6e51c90e5243e0d14de090390ee3451fff5e925302c7c0b18dfa0400311f8966021e0961954ff50dbb870614d51a219b8bf6535fd73f548266bebaab16b9172ed8d67d0bfc4eeb6ea93d1876bc210b67e1de1dfb315ae1596d5d200e19d23aebcad4c498dc7b5b4c69aef76b4c83d8163f4fb1b800a5d5f6e1482c8f11a3596c66890ea3cda6a082021e9ed6929e09ed1f51b38ea196cfad5f4b96345135ecd14167b7b057cd0a6bd65022a14968ed3fe6826047d4cbe3de5f3ee00bb1896f33ec6d05e0714480a8cc501fcddb584e9c7ba424ed08cc6b456e63b5dd36efb988417f978f706df966dce186bd13a4220a525569869615b27f22508d1a73599438592ee47793369a647811f0a6b11fbec1f72dd7035e312e4fdb84ad776b98415788a002589c512ca096722dac6b2046724382d716bc48d9f412a67d3d09ce70e6741e9db7806d1f89f72198d5ff74709517d76d475e8f4c58bfc43b7034829ab42cfeefb0e880a3ec95caf90eaad6fb76143b16735db409577802262fe09a5a666900ffb3d60256bf11e67cd77d3facfd5e652d0198a4a2caff748e2410972631575d053389fafb9f3d6a7d9788b9cd18e1a1e9a2e96d68b1a49118c4317f4b61aa0bf56f248a96c4ef86e41d69697ad3269788c1bf6ea434c3b580d7b6a3ddafff4e35025c566c6dda93d0fa2b2190e936007bb398cb596fb828ca4d4729b5a9b806c4bcced22256bf69f9ff6c9078d6428aa69d6e030b0728ced9021ca5abbd7e737ce7473c5f5fa88278a06b8eef4bab91bc110f12a7661296ad4912e62e89acb7867a93439cac1fd20744d849ab2ae61b0965da953f4a62568912c9f122eef6e0e5bf9b3f608a495ffd4a6379a28a02bf41f288a93231e699cb2a1e344d0d942dacabb352c1c4de8e26fb3a1235e65cbc60d6f33a94cd7ddc818380846e85c3cb61195074035bf817fb4a552bff080f6558369e7b5458ec6d788769b3a587edb64ab62e44b9c250abfc554819857ab16bc3f6150a71781d0c1605b0c2c5e16c353b56686ff0a643528c2365c080ecf1a2ccd6a92bf3bbb960d822201802d240fdc0d37093273fcfeada03b624599c3c184e9978a2b081959f65ab78dbc46533586b17e1eebbc757488ca46a6b322761936085b3b271bdc35e5faf90250720cb33213c8f087984579953b0fd34f070ef163e1c9055c2bf0c9cfc7aae7c820459da92ac9c7509a75c52fd4a3278b32a0ccde433f0b97f3c1ef6c758e2b4d12b3a0507ee43a559c8b40446265a64b680906b3458e48d46d47b5bbb20c9baf8a9f4ea73f13402b49bff06a271080119865d3112bfa89cdcc31033882fdcefd02c06ff2630b73257ea13e56c236e6539b9c2f429987a279c31c476dbecffa27ffe8ba11f9a087bb9835e89d383356db024468936d3fb1b2ae02ad186acba8bf1d849f6e646d194bb212626f850dbfd20f4842a90aa40e944dbc0e8af0b73019603a8218763141f77900879bcdf14f3befb0ccc1a2a8696237f7cd8104348380b316596a5ccdc10204c5194588ad1310e4d3136f6ba07d87831ad11e69adab2eea887a3c30ceeb2ac7228f69c690b2752c48ef067f0af978c3276356519efde36319d89b53b70501927be979732d7c1f07ccce62616f0eb1b6c6f515d591c78fe633816e5d7ac713956b672a0937a74e5eeb50e505e86734d16e288197c722ae0006732f0adff092716130d8dfba97f69d2db48e1aed9e9643e83df0f8a67ab72cdd77f9fdceb3bfc7abffb7215ff3588dcbaec8802d4ad39275fe00d5407a3f383ffb7a287580e6722f8162bebc8b994013d922d74b235eda78eaebe621481851eaacee0cefefaaba587cd4de725087c577f6c279c7d958784ac1e7f7d91ead51b203812828a773c66d2090b7603d9250ce4326d4ef8cfdbd9bd39b68892d4034f3b020a775d2f18381c8725accf344f1ac0c64d4bafaf4442119e921534df8c962cfa1859df5b6ed37b02e9cf8521f5a7d50e0f68fde21ddc861e372757eef2bbbffe12a51f7a6f6305b3025a9e0cf9dd797633762d6f3035f3a2ed4f100c793fb947aaecd3802aa979efd24be53544fcde5b76f1677e35461cda6660a07aaaa3e7e327355433b21842ca0559ef1e3c03291bc8846a321067c66b2c4bc0f7df8dc72eddbc158939383e02610565213a40b512774b2424c177568045f8cb98d59af063d2e4b71a2ff18cfac22cc75e4b4802d4676ae68b2c702c53aa3d9994f707f89f0630183728e61e7fa1b4eb420f2ba4671c1d9da557574858b5b601f5b16ef3ca894ee3a3f10200b59a9275c3d89779dbbc4b50920ae920bb82a8ae6547f74c5839615b273f4cbbce6db708e3ca896247149eeff2daebbb8b46320780536b3e8acaeb791e3e7f60de991868562c33f2b6b81a8d87ac1c84fc5ded0d7cb571814c731238d9e1693c800be86672d0f83011485a845fc290eeef09b22a2b66e2768396e7417095f3dda40d4e32a0e7778a0dfa28106fa02179902311d2dd71742a0ee37505a398c6da770e96b0a6d6948c178d643f62a02bc0577ed3304531a183b5b066544b4ad484e48bef68357bb0d3e202bcde1b58a3c09c7539d83a1c12b7a2b142a6e305ec6b9e69a9732261a1f48091dadd516e88d62bd3b968dec60ed346ee642c04c85f7d64347e7f95f6ff01214f3b74c15b7fa0cf17bf23fad283566a9aab45fc4792a66ea2a7b12abcb75373f4a6f6e2abdb6b3b4c0f91de0efac184c99f062c69ace4b6f14a0b3c8d479dabd9b3bb54e7fba927573bec6ba557360d2e054995cfc893ba991d114c977647ce8822b17d1bf2f7de9540b7f308fde2487b17b5e3333d93c8be8ee42fd34bf085fc84d96f4d2c0214db552d256ca765acb309928fd2b5e47beab11edcbafaea5d8500e445e98c69b7b61ea339d68fec36f460f45a0c2a0b92a3640885321ffd0ab717d4899157beeb452c5a02d953940b1756e080339b7dd5f66448044d453e80371b84b74adc5787ea3a9142a038d0d24cb76416899c8b372138da932f8b114a921298ed7c2eefb35d00174520f752d405f65594b2e86a72ebdf0d6f42e557bdd58136727c63f640ac3c4ca832b54669a40cee1fc8ca5b1cf02741a0f9a351ed9267345d83b205aa7d033fbc9b810216fabd67ac56f8a133c9cd0fc4f32f32e2588ea7548ee074266347725943e3de813fd349f0c9d7c165859e34828c7b3506d75b1a80defeb8d9fab60f478b01c6bb71659317debdfaab2d33bb49596f5e1dc730913eac57a23258e83dc45e3c376d7fbdead5af161c75902c81743216a1249178b0b6eaeb090544dd9f7f77b89383f208987a8d6f0bbc2987dd417a63618e2327c690b1ad3b90e7c931c988775422054ccf1d7e1543562eaad177e73c406e367c1a144249f40a0a618e1c34a340d1a0e65dd3b1f1136b92c53582f604d96580d411ae488374efacc4191981fa9809007c643c5ed7f25ffa1f6ebe5a2735e844815e4c98aee63ec658f617afdcfa4041be6c0cbcf1164a18ec9936bbaca241526f7ec32bf7b7c8e2edc7d2485989cd8d9e8aeef7255f26de14723f10a757c33826b5f5dc35130d75177c337d5df00e95dd87743db3a5ba1405e29c8f28bda07f2cba8b0387e551e719af50a09f6c8c1310d6610740124b5f7a34c54aa60abf90213af6c8a6e4a1c6582f9a62245f2c4c476be3e47eb3b79428fd62bb684e8008cb67d5969f73e71146ad39e8e0102497c5b79946a629265206a5fcb472c4d932f982a8a9e7ccf964c1e4b807c37334cf2ac6263e4ddca76e12f6b02c21bdf7e9857fef3b70ec6897ecc81ee69a1fe0bc71645539b6597b43e4c8566eb08adf248523af08a66fec9a9b520ee72af9729fa8a7e7e923d61767a0fc15a2c1179c52eaabe83b9ca4734a3031ca2e0e80a837a80431bb966aa397f04d0ac790176f4eb400f742ed75fb631acca4e457010bc016468eb027420324c6b875e6df3b9275da3b0b26336e22bd53c28e1d813fa85de6d90183b4cbaf1ef6dea27fd371b50aca7555417b668582d1d378a919273a92da2204ce9a1c6a4ffadaac05a72b368756d83ae29d58be7da36088748223cff5abd34693814a911adc900699470de765290463f0e8d8820e8fcaf428fbd044971dcf31beb66d6d25f64616ceb8f804bd7fe1a10147532174fd826e78cfb5aff071fffd5e372d05e0652e427258184318830215f27547414485be50cdb2d2801be3a2a1b45bfc9e976c03494b27893feea9ccea21dd2de078e5bd20c8e392c872b0be6de94ef847388fc337df0764118c59564cc520761767a119cf055fa917dba2f06fcf454d600ac1d916cc2a3f458d1e52ef2da666086c2ade5842e12f8d40d1d6e80c4c8d871f568a7e3acfd29217dcb9f5093b7dbe8ce6d916fc09910f5385a96c8a90a23499f500e42000dc5f6148dffe39d1978171cc3e57f9f5a5b1140edb15fe88576cb4603fffa12222a2fcb036e6ce78e331baca2d309605d320f84b8a0ba4132437fc4355159a33ab7075c20487d8a36823b54580a83b2dd5345c1963c62fc50ee75a72604dc6c75fce6b5857969cd21e4e5c9daf1732927cb008d02c48bc2b9b9947ea7262c3929c1589ae9c4c89815561607c241b0cbe6c485aa4cffb380e848c037fa5e95276db8c5df2aff9dec5a78024009ea9c1eee82082e0ae8ff32eabca0c3007788f803eddad0f5209063f21d7fb6cd0b041c59cdefe24f63c0303bdcda9583071295a7d7267fcca1284a0bfc7b75120b87ccb781a3a1c1e658b73ef15aed9e190b70368efc3648cec49f09c055f66a9f54b210cac75b7d790258be4cc482a32252725881b8b4f1a01495cbb04c086fe5d70e0da8089c5c1ba9b8a17f228897cad0417caedeb6d90db870a98b719cfcc0e2ec16e3e5a97d6d321e50da82e8fe1864f56545c9b2444466378738c8acafad4dffa87556a4e9efb27d773391aec94386e3079d1d90d341d3194adaa2912eeab5ea3d7232348d05b02e6ee7b57a682f2c404b319c84c55d1428b2ff98995de2ea90816cc0e5df00e210bdb87f552531101ea2200a3850690f54a7fe04fba80c52b62104ac14fa1165502cdc9440ea61be7daf57b88bb1f281920e436b366790954bc22f033265ab3517ce7e8577a88ffbfe0dcf4638058d396018b56b6b898e6f0602b4492b3c44c31876096d7287d661f8a7699cad896f5368b9440e71682750646a2d8fd6237164dd6d3da6b5af5391d5372e25d43cadae61938a4e8f1a068b695172e7384ca2b7c294f32bc2ab3ec0f0b20df872a9600b4b9768f745ce7eb8bf507685b763a32debae527fccabaac07029d740591256d640b092e03481d3a4e3151621d6308d83055dca9ed7e2888df0a144cf537c0b8fe6b1aa3b0e85ebe1099390f233c12759641727a7bf9d3a4e608d6822465e48cd04f4a3815946985a37e9a2ad0dfddc2cc80e3b7cac22d5457c77799f95d9c3a97aa643e356829b2da4423502058b647369dbcf7a6695fcb80304870e2e3102989090d1bf8e6245aeea8115fe502105c0"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x952eaec1b76d611f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffea8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2f384799f33fb974080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r7 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) socket$rds(0x15, 0x5, 0x0) shmat(r7, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x23, 0x800, 0xfffffffc) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0xe, 0x0, 0x20}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 0s ago: executing program 1 (id=9959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000864918110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = socket(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdf1, 0x1000, 0x3, 0x3}, &(0x7f0000000580)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x696c, 0x2b, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0, 0x2a}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff57, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}}, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f00000002c0)}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffffffffffe70) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n, priority 10 [ 517.036504][T30828] netlink: 19 bytes leftover after parsing attributes in process `syz.0.9609'. [ 517.050694][T30829] loop5: detected capacity change from 0 to 512 [ 517.063677][T30829] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.9606: error while reading EA inode 32 err=-116 [ 517.076873][T30829] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.9606: error while reading EA inode 32 err=-116 [ 517.090260][T30829] EXT4-fs (loop5): 1 orphan inode deleted [ 517.136990][T30834] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 517.149551][T30834] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 517.177709][T30834] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 517.404875][T30842] loop4: detected capacity change from 0 to 2048 [ 517.420047][T30842] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 517.466991][T30846] loop4: detected capacity change from 0 to 512 [ 517.478698][T30846] EXT4-fs (loop4): 1 orphan inode deleted [ 517.485370][T30846] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.496789][T15655] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:56: Failed to release dquot type 1 [ 517.661788][T30851] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.708453][T30851] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.808535][T30851] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.840976][T30851] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.928797][T30857] loop5: detected capacity change from 0 to 164 [ 517.946105][T30857] ISOFS: unable to read i-node block [ 517.946192][T30857] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 518.424717][T30867] loop5: detected capacity change from 0 to 512 [ 518.443781][T30867] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.9621: error while reading EA inode 32 err=-116 [ 518.457738][T30867] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.9621: error while reading EA inode 32 err=-116 [ 518.472019][T30867] EXT4-fs (loop5): 1 orphan inode deleted [ 518.563398][T13840] tipc: Node number set to 2886997007 [ 518.583347][T30871] loop4: detected capacity change from 0 to 1024 [ 518.591209][T30871] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 518.602199][T30871] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 518.612853][T30871] JBD2: no valid journal superblock found [ 518.618694][T30871] EXT4-fs (loop4): Could not load journal inode [ 518.637865][T30871] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 519.101252][T30888] loop5: detected capacity change from 0 to 512 [ 519.112596][T30888] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.9628: error while reading EA inode 32 err=-116 [ 519.125673][T30888] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.9628: error while reading EA inode 32 err=-116 [ 519.138722][T30888] EXT4-fs (loop5): 1 orphan inode deleted [ 519.476773][T13841] usb usb8-port1: attempt power cycle [ 519.535240][T30897] loop1: detected capacity change from 0 to 2048 [ 519.551452][T30897] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 519.666825][T30909] loop1: detected capacity change from 0 to 1024 [ 519.673956][T30909] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 519.684937][T30909] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 519.695541][T30909] JBD2: no valid journal superblock found [ 519.701387][T30909] EXT4-fs (loop1): Could not load journal inode [ 519.721909][T30909] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 519.798051][T30911] __nla_validate_parse: 6 callbacks suppressed [ 519.798065][T30911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9637'. [ 519.923047][T30922] loop5: detected capacity change from 0 to 2048 [ 519.941869][T30922] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 519.972731][T15608] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.984652][T15608] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.998511][T15608] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.010500][T15608] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.017388][T30926] loop5: detected capacity change from 0 to 512 [ 520.039306][T30926] EXT4-fs (loop5): 1 orphan inode deleted [ 520.045881][T30926] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.090457][T30930] netem: change failed [ 520.234979][T30945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9649'. [ 520.287960][T30953] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 520.300414][T30953] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 520.319234][T30953] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 520.393983][T30964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9655'. [ 520.402920][T30964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9655'. [ 520.527803][T30974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9658'. [ 520.682178][T30980] netem: change failed [ 520.708929][T30985] bridge: RTM_NEWNEIGH with invalid ether address [ 520.797449][T30996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9665'. [ 520.869860][T31009] loop1: detected capacity change from 0 to 512 [ 520.880677][T31009] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.9665: error while reading EA inode 32 err=-116 [ 520.894560][T31009] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.9665: error while reading EA inode 32 err=-116 [ 520.907882][T31009] EXT4-fs (loop1): 1 orphan inode deleted [ 521.298447][T13841] usb usb8-port1: unable to enumerate USB device [ 521.430085][ T29] kauditd_printk_skb: 2545 callbacks suppressed [ 521.430154][ T29] audit: type=1326 audit(1762436783.440:178239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.1.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e21ab6567 code=0x7ffc0000 [ 521.468128][ T29] audit: type=1326 audit(1762436783.470:178240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.1.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e21a5b779 code=0x7ffc0000 [ 521.491913][ T29] audit: type=1326 audit(1762436783.470:178241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.1.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e21ab6567 code=0x7ffc0000 [ 521.515727][ T29] audit: type=1326 audit(1762436783.470:178242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.1.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e21a5b779 code=0x7ffc0000 [ 521.539339][ T29] audit: type=1326 audit(1762436783.470:178243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.1.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1e21abf6c9 code=0x7ffc0000 [ 521.562986][ T29] audit: type=1326 audit(1762436783.530:178244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.1.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e21ab6567 code=0x7ffc0000 [ 521.586751][ T29] audit: type=1326 audit(1762436783.530:178245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.1.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e21a5b779 code=0x7ffc0000 [ 521.589093][T31090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9667'. [ 521.610441][ T29] audit: type=1326 audit(1762436783.530:178246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.1.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1e21abf6c9 code=0x7ffc0000 [ 521.610478][ T29] audit: type=1326 audit(1762436783.530:178247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.1.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e21ab6567 code=0x7ffc0000 [ 521.619488][T31090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9667'. [ 521.675422][ T29] audit: type=1326 audit(1762436783.530:178248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.1.9665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e21a5b779 code=0x7ffc0000 [ 521.760901][T27897] EXT4-fs unmount: 72 callbacks suppressed [ 521.760975][T27897] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.811285][T31116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9669'. [ 521.884341][T31123] loop1: detected capacity change from 0 to 512 [ 521.894257][T31123] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.9669: error while reading EA inode 32 err=-116 [ 521.907194][T31123] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.9669: error while reading EA inode 32 err=-116 [ 521.920632][T31123] EXT4-fs (loop1): 1 orphan inode deleted [ 521.927097][T31123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.009053][T31128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9671'. [ 522.256474][T31141] netem: change failed [ 522.307401][T31145] loop4: detected capacity change from 0 to 512 [ 522.335525][T31145] EXT4-fs (loop4): 1 orphan inode deleted [ 522.347018][T31145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.359626][T15608] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:11: Failed to release dquot type 1 [ 522.372146][T31145] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.404994][T30379] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.559718][T31160] loop2: detected capacity change from 0 to 512 [ 522.568053][T31160] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.9680: error while reading EA inode 32 err=-116 [ 522.591429][T31160] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.9680: error while reading EA inode 32 err=-116 [ 522.614653][T31160] EXT4-fs (loop2): 1 orphan inode deleted [ 522.627978][T31160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.667052][T27897] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.706716][T31166] loop1: detected capacity change from 0 to 512 [ 522.723109][T31166] EXT4-fs (loop1): 1 orphan inode deleted [ 522.738186][T15628] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:30: Failed to release dquot type 1 [ 522.746892][T31166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.781082][T31166] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.808836][T31171] loop0: detected capacity change from 0 to 164 [ 522.818802][T31171] ISOFS: unable to read i-node block [ 522.824925][T31171] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 522.847260][T27897] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.872520][T31173] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 522.926039][T31178] netem: change failed [ 522.954886][T31181] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.989854][T31185] loop4: detected capacity change from 0 to 512 [ 522.998949][T31181] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.098066][T31194] loop1: detected capacity change from 0 to 1024 [ 523.105449][T31194] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 523.111011][T31185] EXT4-fs (loop4): 1 orphan inode deleted [ 523.116537][T31194] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 523.123149][T31185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.138869][T31196] loop5: detected capacity change from 0 to 512 [ 523.147770][T31185] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 523.161531][T15628] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:30: Failed to release dquot type 1 [ 523.178444][T31194] JBD2: no valid journal superblock found [ 523.184273][T31194] EXT4-fs (loop1): Could not load journal inode [ 523.195432][T31181] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.209789][T31196] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.9690: error while reading EA inode 32 err=-116 [ 523.231564][T31194] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 523.238490][T31196] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.9690: error while reading EA inode 32 err=-116 [ 523.240232][T30379] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.254391][T31196] EXT4-fs (loop5): 1 orphan inode deleted [ 523.266878][T31196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.281150][T31181] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.359475][T30579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.390968][T31200] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 523.403592][T31200] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 523.416305][T31200] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 523.696363][T31211] loop4: detected capacity change from 0 to 512 [ 523.967079][T31211] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.9695: error while reading EA inode 32 err=-116 [ 523.986168][T31211] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.9695: error while reading EA inode 32 err=-116 [ 523.999719][T26886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.009242][T31211] EXT4-fs (loop4): 1 orphan inode deleted [ 524.015584][T31211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.057993][T31215] loop5: detected capacity change from 0 to 164 [ 524.065573][T31215] ISOFS: unable to read i-node block [ 524.071375][T31215] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 524.081073][T31210] loop2: detected capacity change from 0 to 1024 [ 524.088290][T31210] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 524.099280][T31210] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 524.109350][T31210] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 524.124970][T31210] EXT4-fs (loop2): invalid journal inode [ 524.131279][T31210] EXT4-fs (loop2): can't get journal size [ 524.139348][T31210] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.9694: blocks 2-2 from inode overlap system zone [ 524.153705][T31210] EXT4-fs (loop2): failed to initialize system zone (-117) [ 524.161039][T31210] EXT4-fs (loop2): mount failed [ 524.170334][T31221] program syz.5.9698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 524.183678][T31219] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.269151][T31219] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.287508][T31227] netem: change failed [ 524.325086][T31230] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.340539][T31219] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.395894][T31230] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.407601][T15628] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.523223][T15628] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.561736][T31230] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.583485][T30379] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.622193][T15628] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.632976][T31219] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.670392][T15628] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.687341][T31230] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.777614][T15628] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.806061][T15628] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.170182][T15628] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.190892][T15628] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.219523][T15628] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.251361][T15628] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.260025][T31237] __nla_validate_parse: 4 callbacks suppressed [ 525.260069][T31237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9703'. [ 525.277115][T31239] loop5: detected capacity change from 0 to 1024 [ 525.300517][T15628] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.309269][T31239] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 525.320238][T31239] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 525.336651][T15628] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.345257][T31243] loop4: detected capacity change from 0 to 512 [ 525.346070][T31239] JBD2: no valid journal superblock found [ 525.357347][T31239] EXT4-fs (loop5): Could not load journal inode [ 525.371843][T31243] EXT4-fs (loop4): 1 orphan inode deleted [ 525.380347][T31245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9706'. [ 525.387176][T31243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.406675][T15628] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:30: Failed to release dquot type 1 [ 525.408403][T31243] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.429470][T31239] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 525.442054][T31251] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 525.454504][T31251] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 525.466349][T30379] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.475684][T31252] loop2: detected capacity change from 0 to 512 [ 525.475904][T31251] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 525.490710][T31252] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.9706: error while reading EA inode 32 err=-116 [ 525.504052][T31252] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.9706: error while reading EA inode 32 err=-116 [ 525.527583][T31252] EXT4-fs (loop2): 1 orphan inode deleted [ 525.532239][T31255] loop4: detected capacity change from 0 to 2048 [ 525.541387][T31252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.561855][T31255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.579093][T31255] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 525.607963][T30379] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.653729][T31268] loop1: detected capacity change from 0 to 512 [ 525.660419][T31270] loop0: detected capacity change from 0 to 512 [ 525.678619][T31270] EXT4-fs (loop0): 1 orphan inode deleted [ 525.684996][T31270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.689114][T31268] EXT4-fs (loop1): 1 orphan inode deleted [ 525.703389][T15655] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:56: Failed to release dquot type 1 [ 525.704002][T31268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.720258][T15655] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:56: Failed to release dquot type 1 [ 525.727810][T31268] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.739359][T31270] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.878249][T31280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9714'. [ 525.887158][T31280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9714'. [ 526.209798][T30579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.296059][T31283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9715'. [ 526.437054][ T29] kauditd_printk_skb: 2274 callbacks suppressed [ 526.437072][ T29] audit: type=1326 audit(1762436788.450:180517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31281 comm="syz.2.9715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd11f11f85 code=0x7ffc0000 [ 526.438168][ T29] audit: type=1326 audit(1762436788.450:180518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31281 comm="syz.2.9715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd11f11f85 code=0x7ffc0000 [ 526.492414][ T29] audit: type=1326 audit(1762436788.480:180519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31281 comm="syz.2.9715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd11f11f85 code=0x7ffc0000 [ 526.492449][ T29] audit: type=1326 audit(1762436788.480:180520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31281 comm="syz.2.9715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd11f11f85 code=0x7ffc0000 [ 526.492524][ T29] audit: type=1400 audit(1762436788.480:180521): avc: denied { read write } for pid=26886 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 526.492554][ T29] audit: type=1400 audit(1762436788.480:180522): avc: denied { open } for pid=26886 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 526.492584][ T29] audit: type=1400 audit(1762436788.480:180523): avc: denied { ioctl } for pid=26886 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 526.492645][ T29] audit: type=1326 audit(1762436788.480:180524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31281 comm="syz.2.9715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd11f11f85 code=0x7ffc0000 [ 526.492674][ T29] audit: type=1326 audit(1762436788.480:180525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31281 comm="syz.2.9715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd11f11f85 code=0x7ffc0000 [ 526.492728][ T29] audit: type=1326 audit(1762436788.490:180526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31281 comm="syz.2.9715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd11f11f85 code=0x7ffc0000 [ 526.512671][T31287] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9717'. [ 526.718304][T31290] loop4: detected capacity change from 0 to 512 [ 526.727576][T27897] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.738777][T27617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.762179][T31290] EXT4-fs (loop4): 1 orphan inode deleted [ 526.769878][T31290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.782963][T31290] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.793722][T15620] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:23: Failed to release dquot type 1 [ 526.795758][T31299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9720'. [ 526.814758][T31288] loop5: detected capacity change from 0 to 512 [ 526.837406][T30379] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.847785][T31288] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.9717: error while reading EA inode 32 err=-116 [ 526.863215][T31298] loop1: detected capacity change from 0 to 2048 [ 526.870026][T31288] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.9717: error while reading EA inode 32 err=-116 [ 526.883270][T31288] EXT4-fs (loop5): 1 orphan inode deleted [ 526.895752][T31304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9722'. [ 526.909027][T31298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.922003][T31288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.989564][T27897] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.040820][T31312] loop1: detected capacity change from 0 to 1024 [ 527.056339][T31312] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 527.067979][T31312] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 527.087068][T31312] JBD2: no valid journal superblock found [ 527.092841][T31312] EXT4-fs (loop1): Could not load journal inode [ 527.117667][T31315] loop4: detected capacity change from 0 to 1024 [ 527.122485][T31312] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 527.133371][T31315] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 527.144409][T31315] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 527.154196][T31315] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 527.165425][T31315] EXT4-fs (loop4): invalid journal inode [ 527.171428][T31315] EXT4-fs (loop4): can't get journal size [ 527.178492][T31315] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.9724: blocks 2-2 from inode overlap system zone [ 527.199569][T31320] loop0: detected capacity change from 0 to 512 [ 527.211334][T31315] EXT4-fs (loop4): failed to initialize system zone (-117) [ 527.216925][T31322] netlink: 19 bytes leftover after parsing attributes in process `syz.1.9730'. [ 527.218872][T31315] EXT4-fs (loop4): mount failed [ 527.231262][T31320] EXT4-fs (loop0): 1 orphan inode deleted [ 527.246713][T15655] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:56: Failed to release dquot type 1 [ 527.261953][T31320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.275772][T31320] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.310307][T31329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9732'. [ 527.367091][T26886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.386611][T31333] loop1: detected capacity change from 0 to 512 [ 527.394568][T31333] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.9732: error while reading EA inode 32 err=-116 [ 527.394812][T31333] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.9732: error while reading EA inode 32 err=-116 [ 527.395100][T31333] EXT4-fs (loop1): 1 orphan inode deleted [ 527.395646][T31333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.452037][T31339] loop5: detected capacity change from 0 to 512 [ 527.470421][T31339] EXT4-fs (loop5): 1 orphan inode deleted [ 527.470967][T31339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.471232][T31339] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.061660][T27617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.061746][T26886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.124812][T27897] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.203423][T31360] loop5: detected capacity change from 0 to 1024 [ 528.216051][T31360] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 528.227119][T31360] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 528.229785][T31347] loop2: detected capacity change from 0 to 1024 [ 528.238249][T31360] JBD2: no valid journal superblock found [ 528.243952][T31347] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 528.248944][T31360] EXT4-fs (loop5): Could not load journal inode [ 528.259809][T31347] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 528.275807][T31347] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 528.303309][T31360] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 528.307365][T31347] EXT4-fs (loop2): invalid journal inode [ 528.333750][T31347] EXT4-fs (loop2): can't get journal size [ 528.343046][T31347] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.9737: blocks 2-2 from inode overlap system zone [ 528.357588][T31347] EXT4-fs (loop2): failed to initialize system zone (-117) [ 528.364995][T31347] EXT4-fs (loop2): mount failed [ 528.399305][T31372] loop5: detected capacity change from 0 to 164 [ 528.408206][T31372] ISOFS: unable to read i-node block [ 528.414306][T31372] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 528.429588][T31373] loop4: detected capacity change from 0 to 512 [ 528.456944][T31373] EXT4-fs (loop4): 1 orphan inode deleted [ 528.460450][T31378] loop5: detected capacity change from 0 to 512 [ 528.463232][T31373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.482907][T31373] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.493734][T15655] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:56: Failed to release dquot type 1 [ 528.508428][T31378] EXT4-fs (loop5): 1 orphan inode deleted [ 528.513049][T31383] program syz.2.9749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.515144][T31378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.536641][T31378] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.542110][T15620] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:23: Failed to release dquot type 1 [ 529.093386][T31391] loop1: detected capacity change from 0 to 512 [ 529.102000][T31391] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.9750: error while reading EA inode 32 err=-116 [ 529.102316][T31391] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.9750: error while reading EA inode 32 err=-116 [ 529.102972][T31391] EXT4-fs (loop1): 1 orphan inode deleted [ 529.133642][T31391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.258809][T30379] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.270013][T26886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.329933][T31401] loop5: detected capacity change from 0 to 1024 [ 529.339175][T31401] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 529.350195][T31401] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 529.363253][T31401] JBD2: no valid journal superblock found [ 529.369100][T31401] EXT4-fs (loop5): Could not load journal inode [ 529.402731][T31401] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 529.433019][T31413] loop4: detected capacity change from 0 to 164 [ 529.440812][T31413] ISOFS: unable to read i-node block [ 529.446511][T31413] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 529.537472][T31418] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 529.549903][T31418] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 529.566381][T31414] loop5: detected capacity change from 0 to 1024 [ 529.572895][T31418] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 529.581076][T31414] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 529.591995][T31414] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 529.601718][T31414] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 529.617712][T31414] EXT4-fs (loop5): invalid journal inode [ 529.623477][T31414] EXT4-fs (loop5): can't get journal size [ 529.629537][T31414] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.9759: blocks 2-2 from inode overlap system zone [ 529.643746][T31414] EXT4-fs (loop5): failed to initialize system zone (-117) [ 529.651045][T31414] EXT4-fs (loop5): mount failed [ 529.664557][T31424] loop2: detected capacity change from 0 to 512 [ 529.684244][T31424] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.9761: error while reading EA inode 32 err=-116 [ 529.727580][T31424] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.9761: error while reading EA inode 32 err=-116 [ 529.752803][T31424] EXT4-fs (loop2): 1 orphan inode deleted [ 529.765236][T31424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.852440][T27897] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.865251][T31446] hub 1-0:1.0: USB hub found [ 529.878737][T31446] hub 1-0:1.0: 8 ports detected [ 529.884430][T31448] loop0: detected capacity change from 0 to 512 [ 529.898189][T31448] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.9767: error while reading EA inode 32 err=-116 [ 529.911088][T31451] loop1: detected capacity change from 0 to 1024 [ 529.918411][T31451] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 529.921551][T31448] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.9767: error while reading EA inode 32 err=-116 [ 529.929487][T31451] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 529.952650][T31451] JBD2: no valid journal superblock found [ 529.954585][T31448] EXT4-fs (loop0): 1 orphan inode deleted [ 529.958486][T31451] EXT4-fs (loop1): Could not load journal inode [ 529.965857][T31448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.000645][T31451] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 530.006929][T31456] loop5: detected capacity change from 0 to 512 [ 530.018465][T31456] EXT4-fs (loop5): 1 orphan inode deleted [ 530.030903][T31456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.044093][T15655] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:56: Failed to release dquot type 1 [ 530.056781][T31456] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.088718][T26886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.112232][T31464] netem: change failed [ 530.228599][T31466] loop5: detected capacity change from 0 to 1024 [ 530.236047][T31466] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 530.247077][T31466] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 530.257026][T31466] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 530.267909][T31466] EXT4-fs (loop5): invalid journal inode [ 530.273596][T31466] EXT4-fs (loop5): can't get journal size [ 530.279704][T31466] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.9776: blocks 2-2 from inode overlap system zone [ 530.294186][T31466] EXT4-fs (loop5): failed to initialize system zone (-117) [ 530.301502][T31466] EXT4-fs (loop5): mount failed [ 530.392962][T31472] __nla_validate_parse: 10 callbacks suppressed [ 530.393012][T31472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9778'. [ 530.419608][T30579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.443418][T31476] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9780'. [ 530.493232][T31481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9779'. [ 530.502326][T31481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9779'. [ 530.514033][T31482] loop5: detected capacity change from 0 to 512 [ 530.523292][T31482] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.9780: error while reading EA inode 32 err=-116 [ 530.536447][T31482] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.9780: error while reading EA inode 32 err=-116 [ 530.549415][T31482] EXT4-fs (loop5): 1 orphan inode deleted [ 530.555707][T31482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.657442][T27617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.675733][T31486] netlink: 19 bytes leftover after parsing attributes in process `syz.0.9781'. [ 530.707624][T31490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9783'. [ 530.716576][T31490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9783'. [ 530.752182][T31494] loop4: detected capacity change from 0 to 1024 [ 530.759250][T31494] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 530.770326][T31494] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 530.780645][T31494] JBD2: no valid journal superblock found [ 530.786451][T31494] EXT4-fs (loop4): Could not load journal inode [ 530.802219][T31494] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 531.018944][T31504] loop0: detected capacity change from 0 to 1024 [ 531.026623][T31504] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 531.037593][T31504] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 531.047251][T31504] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 531.058198][T31504] EXT4-fs (loop0): invalid journal inode [ 531.063913][T31504] EXT4-fs (loop0): can't get journal size [ 531.070003][T31504] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.9788: blocks 2-2 from inode overlap system zone [ 531.084137][T31504] EXT4-fs (loop0): failed to initialize system zone (-117) [ 531.091496][T31504] EXT4-fs (loop0): mount failed [ 531.169722][T31511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9790'. [ 531.238281][T31514] loop0: detected capacity change from 0 to 512 [ 531.247086][T31514] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.9790: error while reading EA inode 32 err=-116 [ 531.260106][T31514] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.9790: error while reading EA inode 32 err=-116 [ 531.272884][T31514] EXT4-fs (loop0): 1 orphan inode deleted [ 531.286951][T31514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.300466][T26886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.350328][T31523] netlink: 19 bytes leftover after parsing attributes in process `syz.5.9793'. [ 531.423443][T31531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9796'. [ 531.450112][ T29] kauditd_printk_skb: 3128 callbacks suppressed [ 531.450130][ T29] audit: type=1326 audit(1762436793.460:183650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31510 comm="syz.0.9790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fa9a76567 code=0x7ffc0000 [ 531.456888][T31533] loop5: detected capacity change from 0 to 1024 [ 531.481418][ T29] audit: type=1326 audit(1762436793.490:183651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31510 comm="syz.0.9790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fa9a1b779 code=0x7ffc0000 [ 531.497130][T31533] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 531.510300][ T29] audit: type=1326 audit(1762436793.490:183652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31510 comm="syz.0.9790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fa9a76567 code=0x7ffc0000 [ 531.521074][T31533] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 531.544731][ T29] audit: type=1326 audit(1762436793.490:183653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31510 comm="syz.0.9790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fa9a1b779 code=0x7ffc0000 [ 531.559788][T31533] JBD2: no valid journal superblock found [ 531.577959][ T29] audit: type=1326 audit(1762436793.490:183654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31510 comm="syz.0.9790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0fa9a7f6c9 code=0x7ffc0000 [ 531.583712][T31533] EXT4-fs (loop5): Could not load journal inode [ 531.616638][ T29] audit: type=1326 audit(1762436793.630:183655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31510 comm="syz.0.9790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fa9a76567 code=0x7ffc0000 [ 531.650440][ T29] audit: type=1326 audit(1762436793.630:183656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31510 comm="syz.0.9790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fa9a1b779 code=0x7ffc0000 [ 531.654707][T31533] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 531.674168][ T29] audit: type=1326 audit(1762436793.630:183657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31510 comm="syz.0.9790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0fa9a7f6c9 code=0x7ffc0000 [ 531.704845][ T29] audit: type=1326 audit(1762436793.630:183658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31510 comm="syz.0.9790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fa9a76567 code=0x7ffc0000 [ 531.728556][ T29] audit: type=1326 audit(1762436793.630:183659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31510 comm="syz.0.9790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fa9a1b779 code=0x7ffc0000 [ 531.753883][T31536] hub 1-0:1.0: USB hub found [ 531.758752][T31536] hub 1-0:1.0: 8 ports detected [ 531.821478][T31544] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.887717][T31544] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.950681][T31544] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.022769][T27617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.079759][T31544] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.117001][T31554] loop0: detected capacity change from 0 to 512 [ 532.126255][T31554] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.9803: error while reading EA inode 32 err=-116 [ 532.159025][T31554] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.9803: error while reading EA inode 32 err=-116 [ 532.183279][T31554] EXT4-fs (loop0): 1 orphan inode deleted [ 532.215699][T15655] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.254455][T31554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.269083][T15655] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.277808][T15655] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.286294][T15655] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.415349][T31568] loop2: detected capacity change from 0 to 512 [ 532.427422][T31568] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.9808: error while reading EA inode 32 err=-116 [ 532.440721][T31568] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.9808: error while reading EA inode 32 err=-116 [ 532.454044][T31568] EXT4-fs (loop2): 1 orphan inode deleted [ 532.460695][T31568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.532329][T31572] loop1: detected capacity change from 0 to 1024 [ 532.539617][T31572] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 532.550605][T31572] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 532.561307][T31572] JBD2: no valid journal superblock found [ 532.567082][T31572] EXT4-fs (loop1): Could not load journal inode [ 532.582876][T31572] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 532.677319][T31581] loop1: detected capacity change from 0 to 1024 [ 532.684301][T31581] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 532.695223][T31581] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 532.706701][T31581] JBD2: no valid journal superblock found [ 532.712603][T31581] EXT4-fs (loop1): Could not load journal inode [ 532.728915][T31581] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 532.862629][T31596] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.875521][T31584] loop4: detected capacity change from 0 to 1024 [ 532.892103][T31584] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 532.903212][T31584] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 532.913638][T31584] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 532.914603][T27617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.938787][T31596] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.951266][T31584] EXT4-fs (loop4): invalid journal inode [ 532.957031][T31584] EXT4-fs (loop4): can't get journal size [ 532.963648][T31584] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.9814: blocks 2-2 from inode overlap system zone [ 532.978278][T31584] EXT4-fs (loop4): failed to initialize system zone (-117) [ 532.986116][T31584] EXT4-fs (loop4): mount failed [ 533.029129][T31596] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.218487][T30579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.249253][T31596] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.347523][T15657] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.382496][T15657] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.497654][T15657] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.577281][T15657] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.638635][T31615] can: request_module (can-proto-3) failed. [ 533.732862][T31619] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 533.745301][T31619] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 533.772444][T31605] loop0: detected capacity change from 0 to 1024 [ 533.779133][T31615] loop2: detected capacity change from 0 to 512 [ 533.794503][T31605] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 533.805540][T31605] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 533.819717][T31619] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 533.827827][T31605] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 533.842395][T31615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.855678][T31605] EXT4-fs (loop0): invalid journal inode [ 533.861663][T31605] EXT4-fs (loop0): can't get journal size [ 533.867776][T31615] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 533.880442][T31605] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.9821: blocks 2-2 from inode overlap system zone [ 533.913533][T31605] EXT4-fs (loop0): failed to initialize system zone (-117) [ 533.921035][T31605] EXT4-fs (loop0): mount failed [ 533.984576][T31641] program syz.1.9831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.196901][T31649] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 534.416193][T30579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.438684][T31651] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 534.451127][T31651] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 534.461788][T31651] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 534.572130][T31655] bridge: RTM_NEWNEIGH with invalid ether address [ 534.843057][T31666] netem: change failed [ 534.914058][T31676] hub 1-0:1.0: USB hub found [ 534.927129][T31676] hub 1-0:1.0: 8 ports detected [ 535.034213][T31679] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 535.139442][T31695] FAULT_INJECTION: forcing a failure. [ 535.139442][T31695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.152607][T31695] CPU: 1 UID: 0 PID: 31695 Comm: syz.5.9852 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 535.152676][T31695] Tainted: [W]=WARN [ 535.152683][T31695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 535.152695][T31695] Call Trace: [ 535.152700][T31695] [ 535.152708][T31695] __dump_stack+0x1d/0x30 [ 535.152729][T31695] dump_stack_lvl+0xe8/0x140 [ 535.152801][T31695] dump_stack+0x15/0x1b [ 535.152817][T31695] should_fail_ex+0x265/0x280 [ 535.152870][T31695] should_fail+0xb/0x20 [ 535.152885][T31695] should_fail_usercopy+0x1a/0x20 [ 535.152905][T31695] _copy_from_user+0x1c/0xb0 [ 535.152963][T31695] do_ipt_set_ctl+0x3a0/0x820 [ 535.153049][T31695] ? lock_sock_nested+0x112/0x140 [ 535.153093][T31695] nf_setsockopt+0x199/0x1b0 [ 535.153171][T31695] ip_setsockopt+0x102/0x110 [ 535.153217][T31695] udp_setsockopt+0x99/0xb0 [ 535.153247][T31695] sock_common_setsockopt+0x69/0x80 [ 535.153330][T31695] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 535.153356][T31695] __sys_setsockopt+0x184/0x200 [ 535.153389][T31695] __x64_sys_setsockopt+0x64/0x80 [ 535.153428][T31695] x64_sys_call+0x20ec/0x3000 [ 535.153450][T31695] do_syscall_64+0xd2/0x200 [ 535.153538][T31695] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 535.153566][T31695] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 535.153604][T31695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.153630][T31695] RIP: 0033:0x7f1bee75f6c9 [ 535.153669][T31695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.153686][T31695] RSP: 002b:00007f1bed1c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 535.153703][T31695] RAX: ffffffffffffffda RBX: 00007f1bee9b5fa0 RCX: 00007f1bee75f6c9 [ 535.153715][T31695] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 535.153726][T31695] RBP: 00007f1bed1c7090 R08: 000000000000ffb2 R09: 0000000000000000 [ 535.153737][T31695] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.153766][T31695] R13: 00007f1bee9b6038 R14: 00007f1bee9b5fa0 R15: 00007ffc9c5b4148 [ 535.153785][T31695] [ 535.414314][T31706] __nla_validate_parse: 22 callbacks suppressed [ 535.414377][T31706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9855'. [ 535.429661][T31706] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9855'. [ 535.518539][T31712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9857'. [ 535.624466][T31718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9860'. [ 535.741209][T31722] loop0: detected capacity change from 0 to 1024 [ 535.748564][T31722] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 535.759485][T31722] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 535.769808][T31722] JBD2: no valid journal superblock found [ 535.775633][T31722] EXT4-fs (loop0): Could not load journal inode [ 535.794190][T31722] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 535.823046][T31724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9863'. [ 535.860548][T31727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9864'. [ 535.935463][T31734] loop0: detected capacity change from 0 to 512 [ 535.962605][T31735] lo speed is unknown, defaulting to 1000 [ 535.970600][T31734] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.9864: error while reading EA inode 32 err=-116 [ 536.002544][T31738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9866'. [ 536.033544][T31734] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.9864: error while reading EA inode 32 err=-116 [ 536.047737][T31740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9867'. [ 536.056654][T31740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9867'. [ 536.091048][T31734] EXT4-fs (loop0): 1 orphan inode deleted [ 536.097626][T31734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.432208][T31749] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.457318][ T29] kauditd_printk_skb: 1722 callbacks suppressed [ 536.457333][ T29] audit: type=1326 audit(1762436798.470:185382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31732 comm="syz.1.9866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e21af1f85 code=0x7ffc0000 [ 536.488717][ T29] audit: type=1326 audit(1762436798.500:185383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31726 comm="syz.0.9864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fa9a76567 code=0x7ffc0000 [ 536.512479][ T29] audit: type=1326 audit(1762436798.500:185384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31726 comm="syz.0.9864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0fa9a1b779 code=0x7ffc0000 [ 536.536101][ T29] audit: type=1326 audit(1762436798.500:185385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31726 comm="syz.0.9864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0fa9a7f6c9 code=0x7ffc0000 [ 536.559653][ T29] audit: type=1326 audit(1762436798.500:185386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31732 comm="syz.1.9866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e21af1f85 code=0x7ffc0000 [ 536.583396][ T29] audit: type=1400 audit(1762436798.500:185387): avc: denied { execmem } for pid=31748 comm="syz.5.9870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 536.615949][ T29] audit: type=1326 audit(1762436798.610:185388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31732 comm="syz.1.9866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e21af1f85 code=0x7ffc0000 [ 536.639710][ T29] audit: type=1326 audit(1762436798.610:185389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31732 comm="syz.1.9866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e21af1f85 code=0x7ffc0000 [ 536.647662][T31749] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.663419][ T29] audit: type=1326 audit(1762436798.610:185390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31732 comm="syz.1.9866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e21af1f85 code=0x7ffc0000 [ 536.696834][ T29] audit: type=1326 audit(1762436798.610:185391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31732 comm="syz.1.9866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e21af1f85 code=0x7ffc0000 [ 536.737817][T27617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.759191][T31749] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.837898][T31749] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.910924][T15620] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.923135][T15620] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.950110][T15620] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.966801][T15620] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.223994][T31756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9873'. [ 537.352141][T31760] FAULT_INJECTION: forcing a failure. [ 537.352141][T31760] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 537.365437][T31760] CPU: 1 UID: 0 PID: 31760 Comm: syz.1.9874 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 537.365469][T31760] Tainted: [W]=WARN [ 537.365476][T31760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 537.365488][T31760] Call Trace: [ 537.365558][T31760] [ 537.365568][T31760] __dump_stack+0x1d/0x30 [ 537.365596][T31760] dump_stack_lvl+0xe8/0x140 [ 537.365616][T31760] dump_stack+0x15/0x1b [ 537.365633][T31760] should_fail_ex+0x265/0x280 [ 537.365654][T31760] should_fail_alloc_page+0xf2/0x100 [ 537.365746][T31760] __alloc_frozen_pages_noprof+0xff/0x360 [ 537.365772][T31760] alloc_pages_mpol+0xb3/0x260 [ 537.365799][T31760] vma_alloc_folio_noprof+0x1aa/0x300 [ 537.365828][T31760] do_wp_page+0xf60/0x2510 [ 537.365857][T31760] ? __rcu_read_lock+0x37/0x50 [ 537.365911][T31760] ? css_rstat_updated+0xb7/0x240 [ 537.365982][T31760] ? __rcu_read_lock+0x37/0x50 [ 537.366013][T31760] handle_mm_fault+0x77d/0x2be0 [ 537.366035][T31760] ? __rcu_read_unlock+0x4f/0x70 [ 537.366066][T31760] ? mt_find+0x208/0x320 [ 537.366185][T31760] do_user_addr_fault+0x3fe/0x1080 [ 537.366213][T31760] exc_page_fault+0x62/0xa0 [ 537.366243][T31760] asm_exc_page_fault+0x26/0x30 [ 537.366265][T31760] RIP: 0010:__put_user_4+0xd/0x20 [ 537.366362][T31760] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 537.366386][T31760] RSP: 0018:ffffc9000667fd18 EFLAGS: 00050206 [ 537.366412][T31760] RAX: 00000000fffffff2 RBX: 0000000000000000 RCX: 0000200000002000 [ 537.366463][T31760] RDX: ffff888143b7c200 RSI: 00000000fffffff2 RDI: 0000000000000000 [ 537.366481][T31760] RBP: ffffc9000667fec0 R08: 000188810581c507 R09: 0000000000000000 [ 537.366498][T31760] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 537.366514][T31760] R13: 0000000000000800 R14: 0000000000000000 R15: 00000000fffffff2 [ 537.366539][T31760] __se_sys_move_pages+0xa2f/0x1360 [ 537.366578][T31760] ? get_pid_task+0x96/0xd0 [ 537.366651][T31760] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 537.366687][T31760] ? __fget_files+0x184/0x1c0 [ 537.366785][T31760] ? fput+0x8f/0xc0 [ 537.366809][T31760] ? ksys_write+0x192/0x1a0 [ 537.366845][T31760] __x64_sys_move_pages+0x78/0x90 [ 537.366881][T31760] x64_sys_call+0x2f87/0x3000 [ 537.366941][T31760] do_syscall_64+0xd2/0x200 [ 537.366977][T31760] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 537.367032][T31760] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 537.367111][T31760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.367139][T31760] RIP: 0033:0x7f1e21abf6c9 [ 537.367154][T31760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.367177][T31760] RSP: 002b:00007f1e2051f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 537.367202][T31760] RAX: ffffffffffffffda RBX: 00007f1e21d15fa0 RCX: 00007f1e21abf6c9 [ 537.367219][T31760] RDX: 0000200000000040 RSI: 00000000000020a0 RDI: 0000000000000000 [ 537.367237][T31760] RBP: 00007f1e2051f090 R08: 0000200000000000 R09: 0000000000000000 [ 537.367282][T31760] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001 [ 537.367295][T31760] R13: 00007f1e21d16038 R14: 00007f1e21d15fa0 R15: 00007ffcbb6132f8 [ 537.367317][T31760] [ 537.740868][T31767] bridge: RTM_NEWNEIGH with invalid ether address [ 537.788937][T31763] netem: change failed [ 537.812538][T31776] loop4: detected capacity change from 0 to 1024 [ 537.820409][T31774] loop1: detected capacity change from 0 to 1024 [ 537.836149][T31774] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 537.847171][T31774] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 537.857190][T31776] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 537.868155][T31776] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 537.879285][T31774] JBD2: no valid journal superblock found [ 537.885042][T31774] EXT4-fs (loop1): Could not load journal inode [ 537.891420][T31776] JBD2: no valid journal superblock found [ 537.897238][T31776] EXT4-fs (loop4): Could not load journal inode [ 537.940807][T31776] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 538.000623][T31774] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 538.040496][T31788] loop4: detected capacity change from 0 to 1024 [ 538.048132][T31794] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.068043][T31788] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 538.079314][T31788] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 538.099789][T31788] JBD2: no valid journal superblock found [ 538.105577][T31788] EXT4-fs (loop4): Could not load journal inode [ 538.188462][T31794] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.244463][T31788] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 538.268858][T31794] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.311031][T31809] bridge: RTM_NEWNEIGH with invalid ether address [ 538.367845][T31794] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.435650][T15620] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.457841][T15620] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.514612][T15620] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.542313][T15620] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.693195][T31828] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 538.970961][T31865] program syz.1.9896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.984733][T31866] loop0: detected capacity change from 0 to 512 [ 538.998078][T31866] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.9895: error while reading EA inode 32 err=-116 [ 539.147489][T31866] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.9895: error while reading EA inode 32 err=-116 [ 539.184144][T31866] EXT4-fs (loop0): 1 orphan inode deleted [ 539.204464][T31866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.439459][T31878] loop4: detected capacity change from 0 to 512 [ 539.448787][T31878] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.9898: error while reading EA inode 32 err=-116 [ 539.463643][T31878] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.9898: error while reading EA inode 32 err=-116 [ 539.489784][T31881] loop2: detected capacity change from 0 to 1024 [ 539.497337][T31881] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 539.508320][T31881] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 539.518613][T31878] EXT4-fs (loop4): 1 orphan inode deleted [ 539.525327][T31878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.538546][T31881] JBD2: no valid journal superblock found [ 539.544489][T31881] EXT4-fs (loop2): Could not load journal inode [ 539.562744][T31883] netem: change failed [ 539.572373][T31881] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 539.589884][T31885] bridge: RTM_NEWNEIGH with invalid ether address [ 539.607095][T31887] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.640610][T31891] loop5: detected capacity change from 0 to 512 [ 539.659035][T31887] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.672322][T31891] EXT4-fs (loop5): 1 orphan inode deleted [ 539.678683][T31891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.691533][T15630] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:32: Failed to release dquot type 1 [ 539.704361][T31891] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.775520][T31897] program syz.0.9906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 539.799157][T31887] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.813048][T31899] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.830834][T31887] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.804320][T31899] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.916771][T31909] __nla_validate_parse: 6 callbacks suppressed [ 540.916792][T31909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9905'. [ 541.321460][T31913] loop1: detected capacity change from 0 to 512 [ 541.468011][T31899] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.500707][ T29] kauditd_printk_skb: 932 callbacks suppressed [ 541.500726][ T29] audit: type=1326 audit(1762436803.510:186323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31914 comm="syz.4.9909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884dfcf6c9 code=0x7ffc0000 [ 541.541802][T31915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9909'. [ 541.551150][ T29] audit: type=1326 audit(1762436803.510:186324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31914 comm="syz.4.9909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884dfcf6c9 code=0x7ffc0000 [ 541.574999][ T29] audit: type=1326 audit(1762436803.550:186325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31914 comm="syz.4.9909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f884dfcf6c9 code=0x7ffc0000 [ 541.598706][ T29] audit: type=1326 audit(1762436803.550:186326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31914 comm="syz.4.9909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884dfcf6c9 code=0x7ffc0000 [ 541.622498][ T29] audit: type=1326 audit(1762436803.550:186327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31914 comm="syz.4.9909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884dfcf6c9 code=0x7ffc0000 [ 541.646166][ T29] audit: type=1326 audit(1762436803.550:186328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31914 comm="syz.4.9909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f884dfcf6c9 code=0x7ffc0000 [ 541.647191][T31913] EXT4-fs (loop1): 1 orphan inode deleted [ 541.669916][ T29] audit: type=1326 audit(1762436803.550:186329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31914 comm="syz.4.9909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884dfcf6c9 code=0x7ffc0000 [ 541.699393][ T29] audit: type=1326 audit(1762436803.550:186330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31914 comm="syz.4.9909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884dfcf6c9 code=0x7ffc0000 [ 541.723293][ T29] audit: type=1326 audit(1762436803.550:186331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31914 comm="syz.4.9909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f884dfcf6c9 code=0x7ffc0000 [ 541.747053][ T29] audit: type=1326 audit(1762436803.550:186332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31914 comm="syz.4.9909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884dfcf6c9 code=0x7ffc0000 [ 541.772340][T15644] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:45: Failed to release dquot type 1 [ 541.773072][T31913] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.797008][T31899] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.067276][T31926] netem: change failed [ 542.090255][T31928] bridge: RTM_NEWNEIGH with invalid ether address [ 542.116695][T31930] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.148556][T31930] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.198766][T31930] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.249080][T31930] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.370484][T31934] loop4: detected capacity change from 0 to 512 [ 542.389911][T31935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9914'. [ 542.429178][T31934] EXT4-fs (loop4): 1 orphan inode deleted [ 542.439422][T31934] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.102087][T31958] loop4: detected capacity change from 0 to 128 [ 543.110702][T31958] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 543.166589][T31969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9918'. [ 543.504864][T15630] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.517605][T15630] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.536066][T15610] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.552691][T15610] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.680781][T32054] lo speed is unknown, defaulting to 1000 [ 544.130168][T32062] hub 1-0:1.0: USB hub found [ 544.135065][T32062] hub 1-0:1.0: 8 ports detected [ 544.284187][T32067] bridge: RTM_NEWNEIGH with invalid ether address [ 544.326848][T32069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9925'. [ 544.442961][T15638] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.463044][T15638] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.480083][T15638] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.496587][T15638] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.534324][T32078] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.568196][T32080] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 544.721426][T32078] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.758012][T32109] bridge: RTM_NEWNEIGH with invalid ether address [ 544.769086][T32078] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.838865][T32078] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.016310][T32147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9939'. [ 545.953292][T32253] loop2: detected capacity change from 0 to 1024 [ 545.960593][T32253] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 545.971632][T32253] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 545.982052][T32253] JBD2: no valid journal superblock found [ 545.987884][T32253] EXT4-fs (loop2): Could not load journal inode [ 546.006571][T32253] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 546.084198][T32267] loop1: detected capacity change from 0 to 1024 [ 546.091444][T32267] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 546.102500][T32267] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 546.112998][T32267] JBD2: no valid journal superblock found [ 546.118849][T32267] EXT4-fs (loop1): Could not load journal inode [ 546.143463][T32267] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 546.182808][T32273] loop7: detected capacity change from 0 to 16384 [ 546.248546][T32274] ================================================================== [ 546.256683][T32274] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 546.263995][T32274] [ 546.266329][T32274] read-write to 0xffff8881006a56c0 of 8 bytes by task 15642 on cpu 0: [ 546.274484][T32274] xas_clear_mark+0x91/0x180 [ 546.279084][T32274] __folio_start_writeback+0x24a/0x390 [ 546.284563][T32274] __block_write_full_folio+0x53a/0x8f0 [ 546.290125][T32274] block_write_full_folio+0x2c2/0x2e0 [ 546.295521][T32274] blkdev_writepages+0x88/0x100 [ 546.300385][T32274] do_writepages+0x1c6/0x310 [ 546.304986][T32274] __writeback_single_inode+0x80/0x7c0 [ 546.310451][T32274] writeback_sb_inodes+0x48f/0xa30 [ 546.315569][T32274] __writeback_inodes_wb+0x94/0x1a0 [ 546.320773][T32274] wb_writeback+0x266/0x5c0 [ 546.325279][T32274] wb_workfn+0x4c9/0x910 [ 546.329536][T32274] process_scheduled_works+0x4ce/0x9d0 [ 546.335020][T32274] worker_thread+0x582/0x770 [ 546.339614][T32274] kthread+0x489/0x510 [ 546.343696][T32274] ret_from_fork+0x122/0x1b0 [ 546.348304][T32274] ret_from_fork_asm+0x1a/0x30 [ 546.353081][T32274] [ 546.355407][T32274] read to 0xffff8881006a56c0 of 8 bytes by task 32274 on cpu 1: [ 546.363038][T32274] xas_find_marked+0x218/0x620 [ 546.367805][T32274] find_get_entry+0x5d/0x380 [ 546.372414][T32274] filemap_get_folios_tag+0x13b/0x210 [ 546.377809][T32274] writeback_iter+0x4bb/0x820 [ 546.382498][T32274] blkdev_writepages+0xa7/0x100 [ 546.387359][T32274] do_writepages+0x1c6/0x310 [ 546.391972][T32274] filemap_write_and_wait_range+0x144/0x340 [ 546.397892][T32274] sync_blockdev+0x35/0x50 [ 546.402313][T32274] loop_set_status+0x122/0x6a0 [ 546.407109][T32274] lo_ioctl+0x71b/0x12b0 [ 546.411369][T32274] blkdev_ioctl+0x356/0x440 [ 546.415877][T32274] __se_sys_ioctl+0xce/0x140 [ 546.420481][T32274] __x64_sys_ioctl+0x43/0x50 [ 546.425110][T32274] x64_sys_call+0x1816/0x3000 [ 546.429798][T32274] do_syscall_64+0xd2/0x200 [ 546.434304][T32274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.440206][T32274] [ 546.442527][T32274] value changed: 0xffffffffff000000 -> 0xfffffffffc000000 [ 546.449634][T32274] [ 546.451958][T32274] Reported by Kernel Concurrency Sanitizer on: [ 546.458119][T32274] CPU: 1 UID: 0 PID: 32274 Comm: syz.1.9959 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 546.469499][T32274] Tainted: [W]=WARN [ 546.473306][T32274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 546.483376][T32274] ================================================================== [ 546.627010][T32274] loop7: detected capacity change from 16384 to 0 [ 546.718437][ T29] kauditd_printk_skb: 1556 callbacks suppressed [ 546.718459][ T29] audit: type=1400 audit(1762436808.730:187888): avc: denied { unlink } for pid=27897 comm="syz-executor" name="file0" dev="tmpfs" ino=1466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 547.871929][T15642] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.882845][T15642] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.894081][T15642] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.905522][T15642] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0