last executing test programs: 1m33.94201524s ago: executing program 32 (id=1282): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000004000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r1) 1m30.135482675s ago: executing program 33 (id=1315): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c840}, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x72, &(0x7f0000000440)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00@\x00', 0x3c, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x3}}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x40, 0x0, @void}}}}}}}}, 0x0) 1m27.971381939s ago: executing program 34 (id=1339): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000600)='4', 0x1}], 0x1) (fail_nth: 4) 1m26.975173359s ago: executing program 35 (id=1346): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000300)=""/148, 0x94}], 0x1}, 0x4}], 0x1, 0x10000, 0x0) 1m17.189003474s ago: executing program 36 (id=1494): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb110002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x10, &(0x7f0000000740)=ANY=[@ANYRES16, @ANYBLOB="d8c0a259552334543fa14138c41ab7e292fd44ad21a1ffe70134b162949e1753c16ec9b08ff2604e3f9a000000", @ANYBLOB="000000000085000000780000009500"/25], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0xfffffffd, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r8}, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x70) clock_getres(0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x23, 0xb, 0x7fffffffeff3) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) 1m16.734911771s ago: executing program 37 (id=1506): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (fail_nth: 2) 1m16.734687651s ago: executing program 38 (id=1508): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000200), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x204600) 1m12.287651848s ago: executing program 39 (id=1537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) 1m8.848239554s ago: executing program 40 (id=1571): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000631121004000000085100000020000008500000008000000950000000000004095000000000000002dbc2fa55d35ef874ce1ec7979ab2844720028a6bfdfcc30f4bb0250"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (async) socket$nl_xfrm(0x10, 0x3, 0x6) statx(0xffffffffffffffff, &(0x7f0000002340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x10, 0x0) (async) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES8=r0], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x4}, {0x4, 0x80, 0x2, 0x9}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) (async) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m8.77111714s ago: executing program 41 (id=1576): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) (fail_nth: 1) 1m0.720976076s ago: executing program 42 (id=1662): mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 57.711284448s ago: executing program 43 (id=1705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\x94j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4.\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 57.110417105s ago: executing program 44 (id=1711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 54.500396635s ago: executing program 45 (id=1725): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="796120000000040700007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 45.019020698s ago: executing program 0 (id=1890): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3125091, 0x0) 44.949354334s ago: executing program 0 (id=1893): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x15}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x70}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x3000002}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 44.447297514s ago: executing program 0 (id=1901): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="796120000000040700007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") 44.447026025s ago: executing program 46 (id=1901): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="796120000000040700007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") 43.62928698s ago: executing program 47 (id=1912): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x20, 0x40, 0x3, 0x2, {{0x2e, 0x4, 0x0, 0x3, 0xb8, 0x66, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@generic={0x89, 0x7, "8009a82d54"}, @end, @generic={0x94, 0x12, "1425206e8311078d8300368c33003f3e"}, @timestamp_prespec={0x44, 0x4c, 0xd0, 0x3, 0x8, [{@rand_addr=0x64010101, 0x9}, {@multicast2, 0x67d42fb}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@loopback, 0x3}, {@remote, 0x40}, {@loopback, 0x7}, {@multicast1, 0x2}, {@broadcast, 0x8}]}, @generic={0x8f, 0x4, "023a"}, @cipso={0x86, 0x37, 0xffffffffffffffff, [{0x1, 0x12, "b4b77b4003409d3122869cbe05f6d702"}, {0x2, 0x7, "1ebbce7184"}, {0x2, 0xa, "a0c1bfbf689bbc04"}, {0x2, 0xe, "24247b93ced29c61c633d2cb"}]}]}}}}}) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000380)) r5 = syz_open_procfs(0x0, &(0x7f0000000840)='net/dev_snmp6\x00') lseek(r5, 0x1, 0x0) getdents(r5, 0x0, 0x51) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) fcntl$setstatus(r1, 0x4, 0x2c00) r6 = gettid() fcntl$setown(r1, 0x8, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) 43.414285527s ago: executing program 48 (id=1919): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 42.945372795s ago: executing program 3 (id=1922): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 42.875425771s ago: executing program 3 (id=1923): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448f0, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00010000bfa20000000000000702adea6eca9be49d49e4720000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000280)={{0xffffffff, 0x8}, 0x11}, 0x10) (rerun: 32) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x8, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r10, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@loopback, 0x80, r11}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) (async, rerun: 32) r12 = socket(0xa, 0x1, 0x0) (rerun: 32) ioctl(r12, 0x8916, &(0x7f0000000000)) ioctl(r12, 0x8936, &(0x7f0000000000)) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) (async, rerun: 32) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r13, 0x407, 0x6) 42.854654843s ago: executing program 3 (id=1924): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x33, &(0x7f00000002c0)=""/51, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 42.829431465s ago: executing program 3 (id=1925): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x3125091, 0x0) 42.814803766s ago: executing program 3 (id=1926): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x15d, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x127, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2, 0x0, 0x0, 0x10}, {"07fddfa463db464f710aeefe5275a92819e9d09c58265d814b519f626e5160bdf7684bdd53a695754166eb60ceed786f87483d8001cfb4fe19b3042d0be6f498c6fbd4d6c962a4096ed3522003587d05f51b18f73af3741c545a760d341acf6d04d3a83b6340e1bc62f46866fc33f56c3c08d062ac139ff17892666dbf07e717cac2009e92184f6124888f86627b88a6819763aff1e90c165428c731b935d4df859669222ff3938f3b3511bb5e7cd990ec92217f5d8285c2aebc96886e08dec3bd8389eceb1dee687a73ceec6ac6622bb33066fd05d95007d9cd596d181bb3358c8d6f1fc1b0a2c2e93c5d531fc5aa7272ffa34f8d82f7028bcc5900976781f33d7efa40e1e4960aa9a7d959dc83e6f73c7f64"}}}}}}}, 0x0) 42.747422271s ago: executing program 3 (id=1927): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000280)="ca70", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") r6 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r6, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="6cb76def2c36dab0f366cf47ad785ed2fb5e1fa5fb56d566acdc377060c4ba50a58104620df72c3004bfbc77173110e163f7d8ad60c34cdb064852353438fea809e390e392afbf35311690cd8286a6c49668aee29b7537078dba77963d15c085d7343c1012135d361ac15c082b7ac8db87cc10fe3ffc374c8be18fc53437100a11dddb9981072ec036d513870a5bbf62ce9e39f790f61ef997af390b9f5fc8a699e001c59077c459eb40ee80a3ffeb35737da668ef974592faf129325cd9ad0dc5663950a329804c9f5d261f71165b05dac212cc2afc40f980ddef8773f1045e75de4ec606aef87052e9ac784bb0f5a43f9cac5e44ae1a6dd575ce17a4749dc7cd4d7f76a40676e792e5b31a25703b1f35b48a89ed84582ef8f4ac046695f402c25da1fa6bc732a7016edf093b4c31193130b3bc143702e2b1d23743ca797b24495dc4979b81413701c0597dcd5e3bcc9c2050c18cfe03814d358e0f795e990dc44d2c1b9890514bd5ea94a3f3a1e25a8cdc67133e9176d76dc54c31274cff0101d8a42c103bad1b8b57362446f2c2ed8a69daf3d7306ef3fa2015e4ee1ef3392120b82671d73b07f3082ea69ffa0ebc7b53c78862a3e1ece518c1f0abbe4053b4dfafe815c1fe4b0d079446e80d13af972e00644a0188605d7309812e24cd1158677f94a16a5eb0c5d48b60329fc522026efa596ac913540f2a9b0345f279329bfba29a7dfc8894e6a08eeee3dd974c3de9e0602cfd1e3e584b10dd26cd13f7fb432e72ea85fd1d3a872061bc967d7a67a3a7f09f34cc825db5d9ef3ce0ff9873f8eff342eb30fa970007e2f591f07dc9bc5141a9679a2f7c69aa50894353a7830a0f7cf766aff6e81d7c3b88d730946ce3f327716ef6fd270d5bf467aef288db903f740b6ac27b962a3c6462372e63f8da8505f05d17b364dd8c6b5d449accd01b4c6da297669f098bee986b95e389a2d003539ca9dec8c26b9f6bbb5f7fe6f0b764d99bc0dafcad4121ed6a749ac71fc5deeee54d0e8a2d9dccc87df818258d73c8816b78c1be3670fb14dded879caf925e0f8abf63f55ffee02bbffb465f0303338bd12e22fe94fdaa3f033127ecaf41649232c38e83850fd3ebc890ea5db2763a8389ac49bd9b7f6b81f381d3eeb90d0f596e2b7f7dfa2a0e9453c1f5f359b56aae9e97a51f6c092d25a031843e351f5733a25c5905706618ab569359bdca4932f6471f4f2d152f84cfc0c563885b0d93fd015095a8eb9422e3d17ddaf3f20dde5eeea415f76c0617964198c824b98f4d53ab0d4d734dcd6d07dddd5b77c1bd71208632941973bd5b5aca981137ec21dcd86ba518b3d4979b68f704a2a7d7cfeb9be3edf4b4b3560e930d9dba0bc358cba36a129748c1fa73483a69759ba0c4f2ee2a936899e163c213bb3fe5a28e68669fb2da6bbcdf4c55e933d127a8bc68b8d0e6c6c757fe8ea47f26ceb7c1b3ca8b962eb31a081756ed56fe4385dccc5e2a7a53300e9c8a1a55bcf8db3f828cb3db8485110da631a50199a5c1932b5538a2b1c3cddb4451868a413418e3f761530fd477b2ebb449070c73171964203ad7bad4302af13fa6fe55fb88ede096a7aba95ef3665da778250daa9dd4bd5ecb8a807d83fe6dcf2f0cf5de7a4ef742979afd7d93bb2672ad45f6537640313b1ca8838f3fdc08e57455af6398ce5b253312fe1a88206210831e0de59d1e3f9442fb9dd43f1b9c00d151d3234028990f8bcaf65c0ad9ea1bc20e4b7641ff26969b02ccd60d2d8d2d72fe5fd58068cd6d7525c9e24c4246cd776ecf1f57550bb6bddad5093618797547cde5c07e165bc979bfbb5479c58e89c29efa5fdfa5b4a87917a4275609afc849384458ca980ba5a2aa4d10c761bb3b3a57e3d3b41001cdf6", 0x541}], 0x1}}], 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 42.747172591s ago: executing program 49 (id=1927): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000280)="ca70", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") r6 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r6, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 41.790661339s ago: executing program 9 (id=1930): mkdir(&(0x7f0000000580)='./file0\x00', 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) unshare(0x62040200) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 41.542319309s ago: executing program 9 (id=1931): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 41.471511094s ago: executing program 9 (id=1932): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (fail_nth: 4) 41.231180604s ago: executing program 9 (id=1933): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x3125091, 0x0) 41.198765896s ago: executing program 9 (id=1934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x15d, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x127, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2, 0x0, 0x0, 0x10}, {"07fddfa463db464f710aeefe5275a92819e9d09c58265d814b519f626e5160bdf7684bdd53a695754166eb60ceed786f87483d8001cfb4fe19b3042d0be6f498c6fbd4d6c962a4096ed3522003587d05f51b18f73af3741c545a760d341acf6d04d3a83b6340e1bc62f46866fc33f56c3c08d062ac139ff17892666dbf07e717cac2009e92184f6124888f86627b88a6819763aff1e90c165428c731b935d4df859669222ff3938f3b3511bb5e7cd990ec92217f5d8285c2aebc96886e08dec3bd8389eceb1dee687a73ceec6ac6622bb33066fd05d95007d9cd596d181bb3358c8d6f1fc1b0a2c2e93c5d531fc5aa7272ffa34f8d82f7028bcc5900976781f33d7efa40e1e4960aa9a7d959dc83e6f73c7f64"}}}}}}}, 0x0) 40.967496225s ago: executing program 9 (id=1935): socket$inet_tcp(0x2, 0x1, 0x0) creat(0x0, 0xecf86c37d53049cc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0x0, 0x1, 0x8, 0xa76, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xd19, @empty, 0x4}, 0x1c) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) 40.967276685s ago: executing program 50 (id=1935): socket$inet_tcp(0x2, 0x1, 0x0) creat(0x0, 0xecf86c37d53049cc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0x0, 0x1, 0x8, 0xa76, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xd19, @empty, 0x4}, 0x1c) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) 39.735438234s ago: executing program 1 (id=1937): mkdir(&(0x7f0000000580)='./file0\x00', 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) unshare(0x62040200) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 39.384173963s ago: executing program 1 (id=1938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) syz_io_uring_setup(0x3b51, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8003, 0xdd}, &(0x7f0000000040), &(0x7f0000000ac0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000140001000000000000000000028e630100000addd1753f21d8aa93ab69fe1841fbae60420947c645d094fb04cdace462f21fa25dc529"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='module_request\x00', r4}, 0x10) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r6, r5, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r9, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_rr_get_interval(0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r7}, 0x18) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, r13, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 38.931363319s ago: executing program 1 (id=1939): prctl$PR_GET_SPECULATION_CTRL(0x23, 0xb, 0x7fffffffeff3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000007c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000680), r0, 0xe0}}, 0x18) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket(0x10, 0x80000, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xa, 0xc, &(0x7f0000000800)=ANY=[@ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd27, 0x40000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9a70}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9b76}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xe, 0xfffc}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0xd0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000500)={&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000440)=""/133, 0x85}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x2, &(0x7f00000000c0)=""/56, 0x38}, 0x122) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000600)=0x0) r7 = getpgrp(r6) r8 = syz_pidfd_open(r7, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) rt_sigtimedwait(&(0x7f0000000540)={[0xfffffffffffffffd]}, &(0x7f0000000840), &(0x7f0000000400), 0x8) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = pidfd_getfd(r8, r8, 0x0) setns(r10, 0x14020000) 38.903986572s ago: executing program 1 (id=1940): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x3125091, 0x0) 38.880916333s ago: executing program 1 (id=1941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x15d, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x127, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2, 0x0, 0x0, 0x10}, {"07fddfa463db464f710aeefe5275a92819e9d09c58265d814b519f626e5160bdf7684bdd53a695754166eb60ceed786f87483d8001cfb4fe19b3042d0be6f498c6fbd4d6c962a4096ed3522003587d05f51b18f73af3741c545a760d341acf6d04d3a83b6340e1bc62f46866fc33f56c3c08d062ac139ff17892666dbf07e717cac2009e92184f6124888f86627b88a6819763aff1e90c165428c731b935d4df859669222ff3938f3b3511bb5e7cd990ec92217f5d8285c2aebc96886e08dec3bd8389eceb1dee687a73ceec6ac6622bb33066fd05d95007d9cd596d181bb3358c8d6f1fc1b0a2c2e93c5d531fc5aa7272ffa34f8d82f7028bcc5900976781f33d7efa40e1e4960aa9a7d959dc83e6f73c7f64"}}}}}}}, 0x0) 38.119333845s ago: executing program 1 (id=1946): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x20000000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu==\xff\xa4V\xa0') bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={0x0, &(0x7f0000000380)=""/111, &(0x7f0000000580)="598613ad03de6107aa3b2481e99b4b9a7bbaac12f8b791fd25990484a1ddffdfb0eb2ec559b71cbb8071fdc2034c03ec5605a3b4696098120eab36661f0fe3305f77842e4b6dc56597a9da1b6950811bcbe87d9d055dc0945bc5d6a8b2ed47cf30f38e3abf857ab3296a9152b8ea85b29310220449e7962629d5041ab38b987eeeeeebd90b03f6f4ebe78c1056b1b0fa520007572839a1a465f55d03b2a15eed497a7c3652b9eba49c174bbb5bffe7ade4ba3b3aec1ddcffadfa33ca2fa0a21e35a3da7264509420aace0f1949127dc5ad0a1cd4c0cdaef7389f119c1fbe7c10581fcc113465df54edeaf9ffed", &(0x7f0000000800)="6cdf76d9151071e9fd846aec44d132d978146c03a5e93898283fd3e9d4a437baf9866e095cd0b1e328dc3acd6738b19a56a4a47c5a7d207a54c5fd4aefd340d0118c166a5b5a697450705c135b7ae29587b7333eea0f161315ece2256caa0ac64666b135be60e8905b981a4502f0ae7aa812d8e5133f2f05c2bd991ceae7d6be5ea2e7424889b2a269f5122e209e3876d6a215e165a91b8b67564a9b5f7165ba95f603da0fc85a89634c324d70bb23a60cbf8d0dcac87299be65f4e2985bef42c49919068d7149540b47d046bcbfd6afc943753249e9ac2af9211c921a4ccd7b", 0x5, r3}, 0x38) r4 = dup(0xffffffffffffffff) sendfile(r4, r2, 0x0, 0x8000fffffffc) 38.119075535s ago: executing program 51 (id=1946): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x20000000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu==\xff\xa4V\xa0') bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={0x0, &(0x7f0000000380)=""/111, &(0x7f0000000580)="598613ad03de6107aa3b2481e99b4b9a7bbaac12f8b791fd25990484a1ddffdfb0eb2ec559b71cbb8071fdc2034c03ec5605a3b4696098120eab36661f0fe3305f77842e4b6dc56597a9da1b6950811bcbe87d9d055dc0945bc5d6a8b2ed47cf30f38e3abf857ab3296a9152b8ea85b29310220449e7962629d5041ab38b987eeeeeebd90b03f6f4ebe78c1056b1b0fa520007572839a1a465f55d03b2a15eed497a7c3652b9eba49c174bbb5bffe7ade4ba3b3aec1ddcffadfa33ca2fa0a21e35a3da7264509420aace0f1949127dc5ad0a1cd4c0cdaef7389f119c1fbe7c10581fcc113465df54edeaf9ffed", &(0x7f0000000800)="6cdf76d9151071e9fd846aec44d132d978146c03a5e93898283fd3e9d4a437baf9866e095cd0b1e328dc3acd6738b19a56a4a47c5a7d207a54c5fd4aefd340d0118c166a5b5a697450705c135b7ae29587b7333eea0f161315ece2256caa0ac64666b135be60e8905b981a4502f0ae7aa812d8e5133f2f05c2bd991ceae7d6be5ea2e7424889b2a269f5122e209e3876d6a215e165a91b8b67564a9b5f7165ba95f603da0fc85a89634c324d70bb23a60cbf8d0dcac87299be65f4e2985bef42c49919068d7149540b47d046bcbfd6afc943753249e9ac2af9211c921a4ccd7b", 0x5, r3}, 0x38) r4 = dup(0xffffffffffffffff) sendfile(r4, r2, 0x0, 0x8000fffffffc) 35.490862737s ago: executing program 2 (id=1981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x2000404, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000ac0)="$eJzs3NFLU38Yx/Hn5/y5OdEtiKCgeqibuhm6/oAaoRANCnNSXQTHPKux0ybnDGMRuZvotr9DuuwuqP4Bb6Kb7ruTIOjGi+gbnrPpmU6durml7xfIeXae74fzdZvybLCt3n/7rJj3UnmrIgMxlQGRmqyJJNeruv/qxwG/HpKwmlwd+fXt/L0HD29nstnJadWpzMy1tKqOXfz4/OW7S58rI7Pvxz5EZSX5aPVn+vvK0MrZ1T8zTwueFjwtlStq6Vy5XLHmHFvnC14xpXrXsS3P1kLJs92mft4pLyxU1SrNj8YXXNvz1CpVtWhXtVLWiltV64lVKGkqldLRuJxsg22syS1PT1uZHdsm0tEdoeuGW5103UytdTO3fAR7AgAAfWb3+T+Y9Xee/7OzwXE/8/+Zved/Eeb/Lqk13dpj/sex4LoZK17/+23G/A8AAAAAAAAAAAAAAAAAAAAAwL9gzZiEMSaxfqyf8m9HRSQmIqbe7/E20SXhx9+EfvZ4/K/3aLvosNAH92IizpvF3GIuOAb9TF4K4ogt45KQ3/7zoS6op25lJ8fVl5RPzlI9v7SYi0i0kW9ItspfODUR5LU5/7/Ew9dPS0JOt75+umV+SK5cDuVTkpAvj6Usjsz7z+vN/KsJ1Zt3slvyw/46AAAAAACOg5Ru2Pb63e/7C2KyvR/kQ+8PGGOWdnt/YMvr60E5185XVAIAAAAAgEPzqi+KluPY7gGKqIgcIt75whiR3m8jIv1xbzQXN0SkD7ZxVEVMRIIzepD4j414WynTxppBEen53bKPotf/mQAAAAB02ubQv4/Q19dd3BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdPu98H1li/rdVo7BIPXS5y5L8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Ef+BgAA//+4IRyf") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) 35.346810278s ago: executing program 2 (id=1982): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) gettid() r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e24, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff88}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) socketpair(0x2b, 0x2, 0x8, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0}, 0x94) timerfd_create(0x8, 0x0) 34.987133357s ago: executing program 0 (id=1947): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x3125091, 0x0) 34.926534212s ago: executing program 0 (id=1986): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 34.500168887s ago: executing program 2 (id=1990): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = semget$private(0x0, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, 0xf8110, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7cf9, 0x6}, 0x0, 0x10004, 0x10, 0x3, 0x7, 0x20005, 0xe, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) semop(r0, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000002c0)=0x1) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) semop(r0, &(0x7f0000000000)=[{0x0, 0xffff}, {0x0, 0x8, 0x800}], 0x2) 33.535767875s ago: executing program 2 (id=1996): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x3125091, 0x0) 33.483167899s ago: executing program 2 (id=1998): ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000040)=0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000780)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0100"], 0xc) 33.21844299s ago: executing program 2 (id=2000): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r1, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000280)={0x1ff, 0x7, 0x3, 0x0, 0x6, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xa88, 0x80000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0xe66, 0xfffffffffffffffa, 0x3, 0x2000000000005}) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x40, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffe}, 0x0, 0xaffffffdffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x200}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) 33.21543128s ago: executing program 52 (id=2000): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r1, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000280)={0x1ff, 0x7, 0x3, 0x0, 0x6, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xa88, 0x80000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0xe66, 0xfffffffffffffffa, 0x3, 0x2000000000005}) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x40, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffe}, 0x0, 0xaffffffdffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x200}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) 32.776504806s ago: executing program 0 (id=2005): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5f}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r1, r5, 0x8f5, 0x1000000000000000) write(r3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 32.702951322s ago: executing program 53 (id=2005): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5f}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r1, r5, 0x8f5, 0x1000000000000000) write(r3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 3.205816521s ago: executing program 8 (id=2694): mkdir(&(0x7f0000000580)='./file0\x00', 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 3.135155127s ago: executing program 8 (id=2700): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 3.10203426s ago: executing program 8 (id=2702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c30eb29ba6ddcbb59c9aaa8dc07000180140001ff010000007f82936dcfbbc1f62b8b7f7e4b57c1e000000108000200ac1414000c000280050001000000000006faffffff040000240002801400018008000100e0000001"], 0x6c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000003080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 2.946458412s ago: executing program 8 (id=2707): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write(r0, &(0x7f0000000240)="94", 0x1) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write(r1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 2.878230008s ago: executing program 5 (id=2709): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = semget$private(0x0, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, 0xf8110, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7cf9, 0x6}, 0x0, 0x10004, 0x10, 0x3, 0x7, 0x20005, 0xe, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) semop(r0, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000002c0)=0x1) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) semop(r0, &(0x7f0000000000)=[{0x0, 0xffff}, {0x0, 0x8, 0x800}], 0x2) 2.776517546s ago: executing program 8 (id=2713): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000fa461ad7e48489bffa560200130011186809fc071200000f0000ff3f21000000170a001700e0da8979d2fc6ca9e48270faf047145bc79e0b9971bcbe", 0x3f}], 0x1) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x7}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000380), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) clock_getres(0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 1.937890204s ago: executing program 5 (id=2719): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write(r0, &(0x7f0000000240)="94", 0x1) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write(r1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 1.698327273s ago: executing program 5 (id=2723): mkdir(&(0x7f0000000580)='./file0\x00', 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) unshare(0x62040200) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 1.483343051s ago: executing program 5 (id=2729): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.437009314s ago: executing program 5 (id=2732): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1f, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.36059978s ago: executing program 5 (id=2734): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="796120000000040700007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") 1.155625907s ago: executing program 7 (id=2737): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.122531149s ago: executing program 7 (id=2738): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write(r0, &(0x7f0000000240)="94", 0x1) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write(r1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 894.622938ms ago: executing program 4 (id=2740): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000200000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x15d, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x127, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2, 0x0, 0x0, 0x10}, {"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"}}}}}}}, 0x0) 861.63912ms ago: executing program 7 (id=2742): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000fa461ad7e48489bffa560200130011186809fc071200000f0000ff3f21000000170a001700e0da8979d2fc6ca9e48270faf047145bc79e0b9971bcbe", 0x3f}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) clock_getres(0x2, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 842.896132ms ago: executing program 4 (id=2743): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 755.003979ms ago: executing program 4 (id=2744): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC], 0x2, 0x699, &(0x7f0000000140)="$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") r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000880)={0x7fb, 0x8001, 0x1, 'queue0\x00', 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x100000000002, 0x4) write$cgroup_int(r4, &(0x7f0000000140)=0x9, 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000012000000000000000000f42d17b6820000008b510027c6ce9126b090998c6dd4dc0c2b77ad9c4b16"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000180), &(0x7f0000000200)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 413.196917ms ago: executing program 6 (id=2748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x2000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb851}, 0x1c) 412.885177ms ago: executing program 6 (id=2749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="10000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) 412.331577ms ago: executing program 4 (id=2750): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 410.842767ms ago: executing program 7 (id=2751): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000057b871770200000014000200626f6e642d00000000000000000000000900010073797a"], 0x43}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4b52758507126817b3182957b813913d3b168fa5a11f88f742321ce13254a2a821e140c00273e27874a61967571ee32f0e8425f7bacde831c8794471b6eafda5f810e809d48af8ada0228868ffa13bc746d6b901e646f316888176312d92c1a5b6d6f132d618ce1aa1b3d59f6b6929eaf494ace914c1f0637474c223054dcd13d7204b79be91caa95b7", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004070200"], 0x14}, 0x1, 0x40030000000000}, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38a"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) pwritev(r4, 0x0, 0x0, 0x5, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910300000000000730a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x1a, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') 319.564664ms ago: executing program 6 (id=2752): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write(r0, &(0x7f0000000240)="94", 0x1) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write(r1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 201.610344ms ago: executing program 4 (id=2753): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000200000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x15d, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x127, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2, 0x0, 0x0, 0x10}, {"07fddfa463db464f710aeefe5275a92819e9d09c58265d814b519f626e5160bdf7684bdd53a695754166eb60ceed786f87483d8001cfb4fe19b3042d0be6f498c6fbd4d6c962a4096ed3522003587d05f51b18f73af3741c545a760d341acf6d04d3a83b6340e1bc62f46866fc33f56c3c08d062ac139ff17892666dbf07e717cac2009e92184f6124888f86627b88a6819763aff1e90c165428c731b935d4df859669222ff3938f3b3511bb5e7cd990ec92217f5d8285c2aebc96886e08dec3bd8389eceb1dee687a73ceec6ac6622bb33066fd05d95007d9cd596d181bb3358c8d6f1fc1b0a2c2e93c5d531fc5aa7272ffa34f8d82f7028bcc5900976781f33d7efa40e1e4960aa9a7d959dc83e6f73c7f64"}}}}}}}, 0x0) 140.285999ms ago: executing program 7 (id=2754): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x2, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1a, 0x10, &(0x7f00000024c0)=ANY=[@ANYRES32=r0, @ANYBLOB="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", @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r3}, 0x10) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x1) 125.13641ms ago: executing program 4 (id=2755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC], 0x2, 0x699, &(0x7f0000000140)="$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") r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000880)={0x7fb, 0x8001, 0x1, 'queue0\x00', 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x100000000002, 0x4) write$cgroup_int(r4, &(0x7f0000000140)=0x9, 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000012000000000000000000f42d17b6820000008b510027c6ce9126b090998c6dd4dc0c2b77ad9c4b16"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000180), &(0x7f0000000200)='%pK \x00'}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$inet(0x2, 0x2, 0x1) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe54, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r9, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x14}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 111.193401ms ago: executing program 6 (id=2756): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xffff8000, 0x7, 0x0, 0x2}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x2c040090) 67.519855ms ago: executing program 7 (id=2757): syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") 55.213716ms ago: executing program 6 (id=2758): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18001100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r0, r1, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0x8}, 0x18) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000780)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRESDEC=r1, @ANYBLOB="7c54fffe6a68bc1bdde1f4dab59cac03f02ac735ab852b1978a479544783905c1eca40c5b0a6effe589319eecffbdeda8c5117f3b39cb73ad0bc82f1922d3dc62efa94af1f48f23e6d248f7890632a565543212dd8b8fbfc74db9b04884c0e73f8bd1869f478472641497eccaeb5aa0c56", @ANYRES16=r4, @ANYRESDEC=0x0, @ANYRES64=r1], 0x48) readahead(r2, 0xffffffffffff8785, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 6.4937ms ago: executing program 6 (id=2759): fchdir(0xffffffffffffffff) r0 = open(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff03076003008cb89e08f088a8", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file0\x00'}) 0s ago: executing program 8 (id=2760): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x2000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb851}, 0x1c) kernel console output (not intermixed with test programs): loop6): pa ffff8881071d9930: logic 48, phys. 177, len 21 [ 184.509606][T14304] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 184.536008][T14310] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2081'. [ 184.549331][T14310] loop6: detected capacity change from 0 to 1024 [ 184.571363][T14310] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2081: Allocating blocks 449-513 which overlap fs metadata [ 184.588793][T14309] EXT4-fs (loop6): pa ffff8881071d98c0: logic 48, phys. 177, len 21 [ 184.596842][T14309] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 184.658021][T14319] loop5: detected capacity change from 0 to 512 [ 184.671370][T14319] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.722276][ T3384] hid_parser_main: 19 callbacks suppressed [ 184.722294][ T3384] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 184.726184][T14314] netlink: 'syz.6.2082': attribute type 21 has an invalid length. [ 184.728242][ T3384] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 184.736959][T14314] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2082'. [ 184.743960][ T3384] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 184.768909][ T3384] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 184.783829][T14327] loop6: detected capacity change from 0 to 512 [ 184.801861][T14327] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.855174][T14338] lo speed is unknown, defaulting to 1000 [ 184.880071][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2091'. [ 184.893715][T14340] loop6: detected capacity change from 0 to 1024 [ 184.925877][T14340] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2091: Allocating blocks 449-513 which overlap fs metadata [ 184.944928][T14339] EXT4-fs (loop6): pa ffff888107263070: logic 48, phys. 177, len 21 [ 184.944954][T14339] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 185.004490][T14354] loop6: detected capacity change from 0 to 512 [ 185.036599][T14354] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.098310][T14360] loop7: detected capacity change from 0 to 1024 [ 185.111422][T14362] loop4: detected capacity change from 0 to 512 [ 185.122209][T14362] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.162125][T14360] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2096: Allocating blocks 449-513 which overlap fs metadata [ 185.189608][T14359] EXT4-fs (loop7): pa ffff888107263230: logic 48, phys. 177, len 21 [ 185.197627][T14359] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 185.262769][T14376] loop7: detected capacity change from 0 to 512 [ 185.293902][T14376] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.314835][T14381] netlink: 'syz.6.2099': attribute type 21 has an invalid length. [ 185.335417][T14374] loop8: detected capacity change from 0 to 512 [ 185.374571][T14374] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.416053][T14387] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 185.422587][T14387] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 185.430420][T14387] vhci_hcd vhci_hcd.0: Device attached [ 185.448333][T14385] lo speed is unknown, defaulting to 1000 [ 185.469832][T14387] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 185.493466][T14387] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(8) [ 185.500029][T14387] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.508262][T14387] vhci_hcd vhci_hcd.0: Device attached [ 185.533334][T14394] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(11) [ 185.540209][T14394] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.547906][T14394] vhci_hcd vhci_hcd.0: Device attached [ 185.564601][T14395] vhci_hcd: connection closed [ 185.564837][ T7345] vhci_hcd: stop threads [ 185.564949][T14388] vhci_hcd: connection closed [ 185.569603][ T7345] vhci_hcd: release socket [ 185.579710][T14390] vhci_hcd: connection closed [ 185.583012][ T7345] vhci_hcd: disconnect device [ 185.599330][ T7345] vhci_hcd: stop threads [ 185.603670][ T7345] vhci_hcd: release socket [ 185.608098][ T7345] vhci_hcd: disconnect device [ 185.615302][ T7345] vhci_hcd: stop threads [ 185.619517][ T8067] vhci_hcd: vhci_device speed not set [ 185.619574][ T7345] vhci_hcd: release socket [ 185.629301][ T7345] vhci_hcd: disconnect device [ 185.664507][T14400] loop6: detected capacity change from 0 to 1024 [ 185.721508][T14400] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2106: Allocating blocks 449-513 which overlap fs metadata [ 185.750927][T14399] EXT4-fs (loop6): pa ffff888107263070: logic 48, phys. 177, len 21 [ 185.758997][T14399] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 185.819672][ T3398] net_ratelimit: 8 callbacks suppressed [ 185.819687][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.856163][T13138] EXT4-fs unmount: 93 callbacks suppressed [ 185.856180][T13138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.909947][T14404] loop5: detected capacity change from 0 to 8192 [ 185.937362][T14404] vfat: Unknown parameter '' [ 185.968676][T14404] loop5: detected capacity change from 0 to 1024 [ 185.982288][T14404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.001910][T14404] EXT4-fs error (device loop5): ext4_get_first_dir_block:3552: inode #11: comm syz.5.2107: directory missing '..' [ 186.036297][T14415] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 186.048045][T13611] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.073459][T13686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.089818][T14417] loop8: detected capacity change from 0 to 512 [ 186.111801][T14423] loop5: detected capacity change from 0 to 512 [ 186.124737][T14421] lo speed is unknown, defaulting to 1000 [ 186.131916][T14417] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.147327][T14417] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.161616][T14423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.175293][T14423] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.195881][T14419] netlink: 'syz.4.2112': attribute type 21 has an invalid length. [ 186.231126][T13686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.257463][T14436] loop7: detected capacity change from 0 to 512 [ 186.275884][T14436] EXT4-fs (loop7): orphan cleanup on readonly fs [ 186.282287][T14436] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 186.292641][T14436] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 186.309161][T13611] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.309943][T14436] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2118: attempt to clear invalid blocks 2 len 1 [ 186.335496][T14436] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2118: invalid indirect mapped block 1819239214 (level 0) [ 186.352076][T14436] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2118: invalid indirect mapped block 1819239214 (level 1) [ 186.379901][T14436] EXT4-fs (loop7): 1 truncate cleaned up [ 186.387161][T14436] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 186.431720][T14456] loop6: detected capacity change from 0 to 1024 [ 186.455659][T14456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.506856][T14456] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2124: Allocating blocks 449-513 which overlap fs metadata [ 186.526185][T14460] lo speed is unknown, defaulting to 1000 [ 186.533525][T14461] RDS: rds_bind could not find a transport for fe88::109, load rds_tcp or rds_rdma? [ 186.552175][T14462] program syz.7.2118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.570519][T14455] EXT4-fs (loop6): pa ffff8881071d9770: logic 48, phys. 177, len 21 [ 186.578547][T14455] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 186.604909][T13138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.624049][T14466] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 186.630660][T14466] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 186.638355][T14466] vhci_hcd vhci_hcd.0: Device attached [ 186.648389][T14466] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.657311][T14466] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8) [ 186.663895][T14466] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.671543][T14466] vhci_hcd vhci_hcd.0: Device attached [ 186.703969][T14466] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(10) [ 186.710690][T14466] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.718371][T14466] vhci_hcd vhci_hcd.0: Device attached [ 186.745064][T14473] vhci_hcd: connection closed [ 186.745214][T14467] vhci_hcd: connection closed [ 186.750310][T14471] vhci_hcd: connection closed [ 186.755555][ T7403] vhci_hcd: stop threads [ 186.764673][ T7403] vhci_hcd: release socket [ 186.769233][ T7403] vhci_hcd: disconnect device [ 186.776766][ T7403] vhci_hcd: stop threads [ 186.781455][ T7403] vhci_hcd: release socket [ 186.786367][ T7403] vhci_hcd: disconnect device [ 186.791860][ T7403] vhci_hcd: stop threads [ 186.796103][ T7403] vhci_hcd: release socket [ 186.800553][ T7403] vhci_hcd: disconnect device [ 186.813523][T14481] loop8: detected capacity change from 0 to 512 [ 186.819876][ T3644] vhci_hcd: vhci_device speed not set [ 186.830965][ T7345] bridge_slave_1: left allmulticast mode [ 186.836630][ T7345] bridge_slave_1: left promiscuous mode [ 186.842287][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.850353][ T7345] bridge_slave_0: left allmulticast mode [ 186.856030][ T7345] bridge_slave_0: left promiscuous mode [ 186.861935][ T7345] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.869166][ T8067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.883411][T14481] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.898122][T14481] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.952848][ T7345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.971141][ T7345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.979781][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 186.979793][ T29] audit: type=1400 audit(1756725011.745:12042): avc: denied { ioctl } for pid=14480 comm="syz.8.2130" path="/17/file1/file1" dev="loop8" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 187.013340][ T7345] bond0 (unregistering): Released all slaves [ 187.024887][T13611] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.040760][ T7345] bond1 (unregistering): Released all slaves [ 187.068772][ T7345] bond2 (unregistering): Released all slaves [ 187.079495][ T29] audit: type=1400 audit(1756725011.845:12043): avc: denied { read write } for pid=14486 comm="syz.8.2131" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 187.081356][ T7345] bond3 (unregistering): Released all slaves [ 187.103998][ T29] audit: type=1400 audit(1756725011.845:12044): avc: denied { open } for pid=14486 comm="syz.8.2131" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 187.153689][ T7345] bond4 (unregistering): Released all slaves [ 187.183873][ T29] audit: type=1400 audit(1756725011.915:12045): avc: denied { open } for pid=14486 comm="syz.8.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 187.193904][ T7345] bond5 (unregistering): Released all slaves [ 187.209790][T13052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.237703][ T29] audit: type=1400 audit(1756725012.005:12046): avc: denied { create } for pid=14489 comm="syz.4.2133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.259252][ T29] audit: type=1400 audit(1756725012.005:12047): avc: denied { name_connect } for pid=14486 comm="syz.8.2131" dest=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 187.281224][ T29] audit: type=1400 audit(1756725012.015:12048): avc: denied { firmware_load } for pid=14469 comm="syz.6.2126" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 187.287519][T14492] loop7: detected capacity change from 0 to 512 [ 187.320424][ T29] audit: type=1326 audit(1756725012.035:12049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14486 comm="syz.8.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce349ebe9 code=0x7ffc0000 [ 187.344087][ T29] audit: type=1326 audit(1756725012.035:12050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14486 comm="syz.8.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce349ebe9 code=0x7ffc0000 [ 187.367712][ T29] audit: type=1326 audit(1756725012.035:12051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14486 comm="syz.8.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ce349ebe9 code=0x7ffc0000 [ 187.406103][ T7345] hsr_slave_0: left promiscuous mode [ 187.414957][T14492] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.436042][ T7345] hsr_slave_1: left promiscuous mode [ 187.446423][ T7345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.456314][T14492] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.482844][ T7345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.522803][T14502] loop4: detected capacity change from 0 to 256 [ 187.549656][T13052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.605682][ T7345] team0 (unregistering): Port device team_slave_1 removed [ 187.615894][T14504] loop7: detected capacity change from 0 to 512 [ 187.632151][ T7345] team0 (unregistering): Port device team_slave_0 removed [ 187.652285][T14504] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.679584][T14504] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.710035][T14502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.717445][T14502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.728892][T14502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.736357][T14502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.753430][T14508] __nla_validate_parse: 7 callbacks suppressed [ 187.753446][T14508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2138'. [ 187.791037][T14508] loop5: detected capacity change from 0 to 1024 [ 187.814274][T13052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.826160][T14508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.860761][T14516] loop6: detected capacity change from 0 to 512 [ 187.865926][T14508] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2138: Allocating blocks 449-513 which overlap fs metadata [ 187.888027][T14516] EXT4-fs (loop6): orphan cleanup on readonly fs [ 187.894478][T14516] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 187.902722][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.936375][T14516] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 187.954396][T14507] EXT4-fs (loop5): pa ffff8881071d9690: logic 48, phys. 177, len 21 [ 187.962523][T14507] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 187.977358][T14516] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2142: attempt to clear invalid blocks 2 len 1 [ 188.007303][T14516] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2142: invalid indirect mapped block 1819239214 (level 0) [ 188.034476][T14528] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 188.041054][T14528] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 188.048813][T14528] vhci_hcd vhci_hcd.0: Device attached [ 188.056404][T14534] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 188.057607][T14516] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2142: invalid indirect mapped block 1819239214 (level 1) [ 188.079640][T14516] EXT4-fs (loop6): 1 truncate cleaned up [ 188.086952][T14534] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(9) [ 188.090825][T14516] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.093504][T14534] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 188.110760][T13686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.113547][T14534] vhci_hcd vhci_hcd.0: Device attached [ 188.145138][T14528] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(6) [ 188.151701][T14528] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 188.159298][T14528] vhci_hcd vhci_hcd.0: Device attached [ 188.173710][T14535] vhci_hcd: connection closed [ 188.173745][T14529] vhci_hcd: connection closed [ 188.173866][T14539] vhci_hcd: connection closed [ 188.184517][ T7403] vhci_hcd: stop threads [ 188.193503][ T7403] vhci_hcd: release socket [ 188.197409][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2150'. [ 188.197916][ T7403] vhci_hcd: disconnect device [ 188.198931][T14544] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 188.219839][T14547] program syz.6.2142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.230741][ T7403] vhci_hcd: stop threads [ 188.234976][ T7403] vhci_hcd: release socket [ 188.239506][ T807] vhci_hcd: vhci_device speed not set [ 188.239515][ T7403] vhci_hcd: disconnect device [ 188.249989][ T7403] vhci_hcd: stop threads [ 188.254360][ T7403] vhci_hcd: release socket [ 188.258784][ T7403] vhci_hcd: disconnect device [ 188.266119][T14546] loop7: detected capacity change from 0 to 1024 [ 188.281321][T14546] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.305838][T14546] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2150: Allocating blocks 449-513 which overlap fs metadata [ 188.336765][T14545] EXT4-fs (loop7): pa ffff888107263000: logic 48, phys. 177, len 21 [ 188.344817][T14545] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 188.368520][T13052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.395927][T14557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.395954][T14557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.396417][T14557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.418000][T14557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.509923][T14559] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2153'. [ 188.539561][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.630020][T14568] loop5: detected capacity change from 0 to 512 [ 188.637550][T14568] EXT4-fs (loop5): orphan cleanup on readonly fs [ 188.643936][T14568] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 188.652506][T14568] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 188.667168][T14568] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2158: attempt to clear invalid blocks 2 len 1 [ 188.681588][T14568] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2158: invalid indirect mapped block 1819239214 (level 0) [ 188.695682][T14568] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2158: invalid indirect mapped block 1819239214 (level 1) [ 188.713733][T14568] EXT4-fs (loop5): 1 truncate cleaned up [ 188.722530][T13138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.735542][T14571] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2160'. [ 188.741656][T14568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.749811][T14571] loop8: detected capacity change from 0 to 1024 [ 188.777424][T14568] program syz.5.2158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.802278][T14571] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.824306][T14583] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 188.830898][T14583] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 188.838595][T14583] vhci_hcd vhci_hcd.0: Device attached [ 188.844744][T13686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.857374][T14571] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.2160: Allocating blocks 449-513 which overlap fs metadata [ 188.857960][T14583] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 188.891727][T14570] EXT4-fs (loop8): pa ffff888107263230: logic 48, phys. 177, len 21 [ 188.899784][T14570] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 188.921912][T14594] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 188.923499][T13611] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.936268][T14583] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 188.947446][T14583] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 188.955288][T14583] vhci_hcd vhci_hcd.0: Device attached [ 188.961333][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.990678][T14583] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 188.997324][T14583] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.005013][T14583] vhci_hcd vhci_hcd.0: Device attached [ 189.019610][ T23] vhci_hcd: vhci_device speed not set [ 189.045067][T14601] vhci_hcd: connection closed [ 189.045073][T14595] vhci_hcd: connection closed [ 189.045578][T14584] vhci_hcd: connection closed [ 189.054797][ T7403] vhci_hcd: stop threads [ 189.063746][ T7403] vhci_hcd: release socket [ 189.068328][ T7403] vhci_hcd: disconnect device [ 189.079551][ T23] usb 9-1: new full-speed USB device number 4 using vhci_hcd [ 189.089715][T14585] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 189.097290][ T7403] vhci_hcd: stop threads [ 189.101602][ T7403] vhci_hcd: release socket [ 189.106145][ T7403] vhci_hcd: disconnect device [ 189.111161][ T7403] vhci_hcd: stop threads [ 189.115398][ T7403] vhci_hcd: release socket [ 189.119962][ T7403] vhci_hcd: disconnect device [ 189.194614][T14625] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2168'. [ 189.210006][T14625] loop8: detected capacity change from 0 to 1024 [ 189.229335][T14625] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.267700][T14641] loop7: detected capacity change from 0 to 512 [ 189.284574][T14641] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.302206][T14625] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.2168: Allocating blocks 449-513 which overlap fs metadata [ 189.316320][T14641] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.341455][T14624] EXT4-fs (loop8): pa ffff8881071d9770: logic 48, phys. 177, len 21 [ 189.349584][T14624] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 189.398959][T13611] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.418459][T13052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.427655][T14670] loop8: detected capacity change from 0 to 512 [ 189.436400][T14670] EXT4-fs (loop8): orphan cleanup on readonly fs [ 189.442785][T14670] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 189.451705][T14670] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 189.467496][T14670] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.2170: attempt to clear invalid blocks 2 len 1 [ 189.481218][T14670] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2170: invalid indirect mapped block 1819239214 (level 0) [ 189.495375][T14670] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2170: invalid indirect mapped block 1819239214 (level 1) [ 189.510448][T14670] EXT4-fs (loop8): 1 truncate cleaned up [ 189.516447][T14670] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.522544][T14674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.564355][T14691] loop7: detected capacity change from 0 to 512 [ 189.582314][T14691] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.595491][T14691] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.606885][T14699] program syz.8.2170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.621160][T14701] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 189.627725][T14701] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 189.635336][T14701] vhci_hcd vhci_hcd.0: Device attached [ 189.636226][T13052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.641517][T14701] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.666534][T14701] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 189.670944][T14710] loop7: detected capacity change from 0 to 512 [ 189.673080][T14701] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.680617][T14710] EXT4-fs (loop7): orphan cleanup on readonly fs [ 189.686934][T14701] vhci_hcd vhci_hcd.0: Device attached [ 189.693235][T14710] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 189.707148][T14710] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 189.707798][T14701] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 189.721790][T14710] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2174: attempt to clear invalid blocks 2 len 1 [ 189.728041][T14701] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.741036][T14710] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2174: invalid indirect mapped block 1819239214 (level 0) [ 189.748526][T14701] vhci_hcd vhci_hcd.0: Device attached [ 189.770198][T14710] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2174: invalid indirect mapped block 1819239214 (level 1) [ 189.784374][T14712] vhci_hcd: connection closed [ 189.784450][T14703] vhci_hcd: connection closed [ 189.784484][ T7345] vhci_hcd: stop threads [ 189.789238][T14707] vhci_hcd: connection closed [ 189.793858][ T7345] vhci_hcd: release socket [ 189.807259][ T7345] vhci_hcd: disconnect device [ 189.813556][T14710] EXT4-fs (loop7): 1 truncate cleaned up [ 189.819802][T14710] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.832843][ T7345] vhci_hcd: stop threads [ 189.837108][ T7345] vhci_hcd: release socket [ 189.841625][ T7345] vhci_hcd: disconnect device [ 189.850633][ T7345] vhci_hcd: stop threads [ 189.854956][ T7345] vhci_hcd: release socket [ 189.859407][ T7345] vhci_hcd: disconnect device [ 189.914678][T14736] program syz.7.2174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.979680][ T3644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.004899][T14752] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2175'. [ 190.019258][T14752] loop5: detected capacity change from 0 to 1024 [ 190.032205][T14752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.058428][T14752] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2175: Allocating blocks 449-513 which overlap fs metadata [ 190.076096][T14751] EXT4-fs (loop5): pa ffff888107263000: logic 48, phys. 177, len 21 [ 190.084266][T14751] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 190.102487][T13686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.220273][T14762] netlink: 'syz.5.2176': attribute type 21 has an invalid length. [ 190.228560][T14762] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2176'. [ 190.259099][T13611] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.279227][T14770] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2179'. [ 190.346191][T14776] loop8: detected capacity change from 0 to 512 [ 190.366946][T14776] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.367063][T14776] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.458970][T13611] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.483747][T14785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2182'. [ 190.510846][T13052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.527067][T14787] loop7: detected capacity change from 0 to 512 [ 190.541552][T14787] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.554678][T14787] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.599018][T13052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.607305][T14796] loop8: detected capacity change from 0 to 512 [ 190.618581][T14796] EXT4-fs (loop8): orphan cleanup on readonly fs [ 190.623252][T14799] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 190.625010][T14796] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 190.631472][T14799] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 190.631556][T14799] vhci_hcd vhci_hcd.0: Device attached [ 190.657132][T14799] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.657355][T14796] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 190.680763][T14796] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.2188: attempt to clear invalid blocks 2 len 1 [ 190.683125][T14799] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8) [ 190.700168][T14799] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 190.707870][T14799] vhci_hcd vhci_hcd.0: Device attached [ 190.716275][T14809] loop6: detected capacity change from 0 to 256 [ 190.721352][T14799] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(10) [ 190.722647][T14796] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2188: invalid indirect mapped block 1819239214 (level 0) [ 190.729099][T14799] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 190.750567][T14799] vhci_hcd vhci_hcd.0: Device attached [ 190.756771][T14796] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2188: invalid indirect mapped block 1819239214 (level 1) [ 190.771095][T14796] EXT4-fs (loop8): 1 truncate cleaned up [ 190.777491][T14796] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.793216][T14810] vhci_hcd: connection closed [ 190.793387][T14806] vhci_hcd: connection closed [ 190.793409][T14800] vhci_hcd: connection closed [ 190.805102][ T7403] vhci_hcd: stop threads [ 190.814117][ T7403] vhci_hcd: release socket [ 190.815218][T14813] netlink: 'syz.7.2187': attribute type 21 has an invalid length. [ 190.818523][ T7403] vhci_hcd: disconnect device [ 190.828745][T14813] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2187'. [ 190.839428][ T3644] vhci_hcd: vhci_device speed not set [ 190.856745][ T7403] vhci_hcd: stop threads [ 190.861110][ T7403] vhci_hcd: release socket [ 190.865572][ T7403] vhci_hcd: disconnect device [ 190.872617][ T7403] vhci_hcd: stop threads [ 190.873727][T14817] loop6: detected capacity change from 0 to 512 [ 190.876906][ T7403] vhci_hcd: release socket [ 190.876922][ T7403] vhci_hcd: disconnect device [ 190.899456][ T3644] usb 11-1: new full-speed USB device number 3 using vhci_hcd [ 190.900696][T14821] program syz.8.2188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.907034][ T3644] usb 11-1: enqueue for inactive port 0 [ 190.922191][ T3644] usb 11-1: enqueue for inactive port 0 [ 190.923344][T14817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.927984][ T3644] usb 11-1: enqueue for inactive port 0 [ 190.946370][T14817] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.989455][ T3644] vhci_hcd: vhci_device speed not set [ 190.996205][T13138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.019491][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.058849][T14829] loop6: detected capacity change from 0 to 512 [ 191.066590][T14829] EXT4-fs (loop6): orphan cleanup on readonly fs [ 191.073029][T14829] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 191.081758][T14829] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 191.096337][T14829] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2197: attempt to clear invalid blocks 2 len 1 [ 191.109359][T14829] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2197: invalid indirect mapped block 1819239214 (level 0) [ 191.123758][T14829] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2197: invalid indirect mapped block 1819239214 (level 1) [ 191.138179][T14829] EXT4-fs (loop6): 1 truncate cleaned up [ 191.144532][T14829] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.174095][T14832] loop7: detected capacity change from 0 to 512 [ 191.191137][T14832] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.204058][T14832] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.215166][T14839] program syz.6.2197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.242199][T13052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.296327][T14846] loop4: detected capacity change from 0 to 256 [ 191.330702][T14853] loop5: detected capacity change from 0 to 512 [ 191.345653][T14855] loop4: detected capacity change from 0 to 1024 [ 191.354300][T14853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.360917][T14855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.368020][T14853] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.395343][T14855] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2207: Allocating blocks 449-513 which overlap fs metadata [ 191.396420][T14849] netlink: 'syz.7.2204': attribute type 21 has an invalid length. [ 191.418445][T14854] EXT4-fs (loop4): pa ffff888107263230: logic 48, phys. 177, len 21 [ 191.426547][T14854] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 191.450788][T13091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.469192][T13611] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.480747][T13686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.481605][T14865] loop7: detected capacity change from 0 to 1024 [ 191.514566][T14865] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.543716][T14875] loop5: detected capacity change from 0 to 512 [ 191.559194][T14865] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2211: Allocating blocks 449-513 which overlap fs metadata [ 191.576304][T14875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.589333][T14875] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.589572][T13379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.612571][T14883] loop4: detected capacity change from 0 to 256 [ 191.623951][T14864] EXT4-fs (loop7): pa ffff8881071d9700: logic 48, phys. 177, len 21 [ 191.632134][T14864] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 191.662544][T13052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.671919][T13686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.674520][T14885] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 191.705389][T14889] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 191.711966][T14889] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 191.719698][T14889] vhci_hcd vhci_hcd.0: Device attached [ 191.744813][T14889] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.746589][T14894] loop7: detected capacity change from 0 to 1024 [ 191.762658][T14889] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8) [ 191.769191][T14889] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.776817][T14889] vhci_hcd vhci_hcd.0: Device attached [ 191.785808][T14894] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.798389][T14889] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(10) [ 191.804999][T14889] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.812603][T14889] vhci_hcd vhci_hcd.0: Device attached [ 191.834769][T14900] vhci_hcd: connection closed [ 191.834875][ T7328] vhci_hcd: stop threads [ 191.837667][T14896] vhci_hcd: connection closed [ 191.839671][ T7328] vhci_hcd: release socket [ 191.844375][T14890] vhci_hcd: connection closed [ 191.848602][ T7328] vhci_hcd: disconnect device [ 191.853264][T14905] loop4: detected capacity change from 0 to 512 [ 191.862428][T14894] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2219: Allocating blocks 449-513 which overlap fs metadata [ 191.882836][ T7328] vhci_hcd: stop threads [ 191.887092][ T7328] vhci_hcd: release socket [ 191.891566][ T7328] vhci_hcd: disconnect device [ 191.898856][T14905] EXT4-fs (loop4): orphan cleanup on readonly fs [ 191.905375][T14905] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 191.916571][ T7328] vhci_hcd: stop threads [ 191.920877][ T7328] vhci_hcd: release socket [ 191.922083][T14905] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, [ 191.925372][ T7328] vhci_hcd: disconnect device [ 191.929591][T14909] loop8: detected capacity change from 0 to 512 [ 191.933685][T14905] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 191.954602][T13138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.964032][T14893] EXT4-fs (loop7): pa ffff8881071d9620: logic 48, phys. 177, len 21 [ 191.968272][T14905] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2220: attempt to clear invalid blocks 2 len 1 [ 191.972137][T14893] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 191.996626][T14909] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.009794][T14909] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.022136][T13052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.032188][T14905] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2220: invalid indirect mapped block 1819239214 (level 0) [ 192.056386][T13611] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.056662][T14905] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2220: invalid indirect mapped block 1819239214 (level 1) [ 192.080252][ T8067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.080737][T14905] EXT4-fs (loop4): 1 truncate cleaned up [ 192.135148][ T29] kauditd_printk_skb: 559 callbacks suppressed [ 192.135162][ T29] audit: type=1326 audit(1756725016.905:12611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14923 comm="syz.8.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce349ebe9 code=0x7ffc0000 [ 192.165373][T14924] loop8: detected capacity change from 0 to 256 [ 192.165559][ T29] audit: type=1326 audit(1756725016.905:12612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14923 comm="syz.8.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce349ebe9 code=0x7ffc0000 [ 192.174215][T14925] program syz.4.2220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.195427][ T29] audit: type=1326 audit(1756725016.905:12613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14923 comm="syz.8.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ce349ebe9 code=0x7ffc0000 [ 192.195460][ T29] audit: type=1326 audit(1756725016.905:12614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14923 comm="syz.8.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce349ebe9 code=0x7ffc0000 [ 192.240515][T14927] ext4: Unknown parameter '8' [ 192.251927][ T29] audit: type=1326 audit(1756725016.905:12615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14923 comm="syz.8.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ce349ebe9 code=0x7ffc0000 [ 192.251960][ T29] audit: type=1326 audit(1756725016.905:12616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14923 comm="syz.8.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce349ebe9 code=0x7ffc0000 [ 192.304622][ T29] audit: type=1326 audit(1756725016.905:12617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14923 comm="syz.8.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ce349ebe9 code=0x7ffc0000 [ 192.328364][ T29] audit: type=1326 audit(1756725016.915:12618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14923 comm="syz.8.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce349ebe9 code=0x7ffc0000 [ 192.352112][ T29] audit: type=1326 audit(1756725016.915:12619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14923 comm="syz.8.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f1ce349ebe9 code=0x7ffc0000 [ 192.375832][ T29] audit: type=1326 audit(1756725016.915:12620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14923 comm="syz.8.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce349ebe9 code=0x7ffc0000 [ 192.400634][T14924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.408000][T14924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.415656][T14924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.423087][T14924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.487865][T14929] loop5: detected capacity change from 0 to 512 [ 192.501186][T14929] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.537507][T14935] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 192.554202][T14938] loop8: detected capacity change from 0 to 512 [ 192.574568][T14938] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.710570][T14954] loop4: detected capacity change from 0 to 512 [ 192.721149][T14954] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.788086][T14965] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 192.794691][T14965] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 192.802386][T14965] vhci_hcd vhci_hcd.0: Device attached [ 192.809120][T14965] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 192.819104][T14965] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 192.825650][T14965] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 192.833347][T14965] vhci_hcd vhci_hcd.0: Device attached [ 192.840593][T14970] loop8: detected capacity change from 0 to 256 [ 192.846866][T14966] vhci_hcd: connection closed [ 192.847019][T14969] vhci_hcd: connection closed [ 192.851831][ T7328] vhci_hcd: stop threads [ 192.860835][ T7328] vhci_hcd: release socket [ 192.860849][ T7328] vhci_hcd: disconnect device [ 192.861039][ T7328] vhci_hcd: stop threads [ 192.861045][ T7328] vhci_hcd: release socket [ 192.861054][ T7328] vhci_hcd: disconnect device [ 192.911074][T14975] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 192.954879][T14984] loop5: detected capacity change from 0 to 512 [ 192.962979][T14984] EXT4-fs (loop5): orphan cleanup on readonly fs [ 192.969510][T14984] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 192.978422][T14984] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 192.993979][T14984] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2245: attempt to clear invalid blocks 2 len 1 [ 192.997588][T14988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.014352][T14988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.017747][T14984] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2245: invalid indirect mapped block 1819239214 (level 0) [ 193.036455][T14984] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2245: invalid indirect mapped block 1819239214 (level 1) [ 193.036514][T14988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.051271][T14984] EXT4-fs (loop5): 1 truncate cleaned up [ 193.057948][T14988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.072663][T14990] __nla_validate_parse: 8 callbacks suppressed [ 193.072677][T14990] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2246'. [ 193.072946][T14984] program syz.5.2245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.101290][ T8067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.132992][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2247'. [ 193.146636][T14996] loop6: detected capacity change from 0 to 1024 [ 193.158970][T14999] loop5: detected capacity change from 0 to 512 [ 193.172350][T14999] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.183518][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.185246][T14996] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2247: Allocating blocks 449-513 which overlap fs metadata [ 193.226008][T14991] EXT4-fs (loop6): pa ffff888107263070: logic 48, phys. 177, len 21 [ 193.234064][T14991] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 193.268531][T15010] loop6: detected capacity change from 0 to 256 [ 193.284217][T15010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.291774][T15010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.300966][T15010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.308467][T15010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.318317][T15015] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 193.392668][T15017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.433340][T15024] loop7: detected capacity change from 0 to 512 [ 193.442221][T15024] EXT4-fs (loop7): orphan cleanup on readonly fs [ 193.448601][T15024] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 193.461151][T15024] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 193.487446][T15032] loop4: detected capacity change from 0 to 512 [ 193.487721][T15024] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2259: attempt to clear invalid blocks 2 len 1 [ 193.498632][T15034] loop6: detected capacity change from 0 to 512 [ 193.507547][T15024] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2259: invalid indirect mapped block 1819239214 (level 0) [ 193.527883][T15024] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2259: invalid indirect mapped block 1819239214 (level 1) [ 193.528910][T15032] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.542386][T15024] EXT4-fs (loop7): 1 truncate cleaned up [ 193.560457][T15034] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.578846][T15024] program syz.7.2259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.626739][T15042] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2264'. [ 193.654378][T15042] loop7: detected capacity change from 0 to 1024 [ 193.661511][T15049] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 193.668025][T15049] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 193.675683][T15049] vhci_hcd vhci_hcd.0: Device attached [ 193.681953][T15049] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.691475][T15049] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 193.698000][T15049] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 193.705663][T15049] vhci_hcd vhci_hcd.0: Device attached [ 193.708381][T15042] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2264: Allocating blocks 449-513 which overlap fs metadata [ 193.732768][T15054] vhci_hcd: connection closed [ 193.733006][ T7353] vhci_hcd: stop threads [ 193.741997][ T7353] vhci_hcd: release socket [ 193.746416][ T7353] vhci_hcd: disconnect device [ 193.751624][T15041] EXT4-fs (loop7): pa ffff8881071d9540: logic 48, phys. 177, len 21 [ 193.759648][T15041] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 193.759863][T15050] vhci_hcd: connection closed [ 193.779754][ T7353] vhci_hcd: stop threads [ 193.789042][ T7353] vhci_hcd: release socket [ 193.793504][ T7353] vhci_hcd: disconnect device [ 193.820628][T13379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.842991][T15069] loop6: detected capacity change from 0 to 512 [ 193.851984][T15061] loop8: detected capacity change from 0 to 128 [ 193.858694][T15061] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 193.869908][T15069] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.896386][T15073] loop7: detected capacity change from 0 to 512 [ 193.904425][T15073] EXT4-fs (loop7): orphan cleanup on readonly fs [ 193.910813][T15073] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 193.919601][T15073] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 193.934686][T15073] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2274: attempt to clear invalid blocks 2 len 1 [ 193.947821][T15073] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2274: invalid indirect mapped block 1819239214 (level 0) [ 193.962679][T15073] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2274: invalid indirect mapped block 1819239214 (level 1) [ 193.977821][T15073] EXT4-fs (loop7): 1 truncate cleaned up [ 193.994081][T15073] program syz.7.2274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.032857][T15080] loop7: detected capacity change from 0 to 164 [ 194.042732][T15080] bio_check_eod: 1 callbacks suppressed [ 194.042747][T15080] syz.7.2277: attempt to access beyond end of device [ 194.042747][T15080] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 194.043052][T15082] loop6: detected capacity change from 0 to 512 [ 194.072441][T15082] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.139683][ T3644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.149960][ T23] usb 9-1: enqueue for inactive port 0 [ 194.164217][ T23] usb 9-1: enqueue for inactive port 0 [ 194.178418][T15095] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2282'. [ 194.192399][T15095] loop6: detected capacity change from 0 to 1024 [ 194.223179][T15095] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2282: Allocating blocks 449-513 which overlap fs metadata [ 194.241186][T15094] EXT4-fs (loop6): pa ffff888107263000: logic 48, phys. 177, len 21 [ 194.249282][T15094] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 194.259347][ T23] vhci_hcd: vhci_device speed not set [ 194.286026][T15110] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 194.286395][T15107] IPVS: stopping master sync thread 15110 ... [ 194.332027][T15113] loop4: detected capacity change from 0 to 512 [ 194.344739][T15115] loop6: detected capacity change from 0 to 512 [ 194.345296][T15113] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.365932][T15119] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2289'. [ 194.375301][T15107] loop7: detected capacity change from 0 to 2048 [ 194.376076][T15115] EXT4-fs (loop6): orphan cleanup on readonly fs [ 194.388238][T15115] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 194.396809][T15115] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 194.430969][T15115] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2288: attempt to clear invalid blocks 2 len 1 [ 194.466121][T15107] loop7: unable to read partition table [ 194.477355][T15107] loop7: partition table beyond EOD, truncated [ 194.477904][T15115] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2288: invalid indirect mapped block 1819239214 (level 0) [ 194.483584][T15107] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 194.523550][T15126] loop5: detected capacity change from 0 to 512 [ 194.542426][T15115] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2288: invalid indirect mapped block 1819239214 (level 1) [ 194.560417][T15115] EXT4-fs (loop6): 1 truncate cleaned up [ 194.567297][T15126] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.619518][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.630691][T15138] program syz.6.2288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.646178][T15140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2296'. [ 194.660414][T15140] loop4: detected capacity change from 0 to 1024 [ 194.672855][T15144] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 194.679376][T15144] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 194.685437][T15140] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2296: Allocating blocks 449-513 which overlap fs metadata [ 194.687153][T15144] vhci_hcd vhci_hcd.0: Device attached [ 194.707276][T15139] EXT4-fs (loop4): pa ffff8881071d94d0: logic 48, phys. 177, len 21 [ 194.712210][T15144] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.715403][T15139] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 194.730492][T15144] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8) [ 194.739891][T15144] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 194.747530][T15144] vhci_hcd vhci_hcd.0: Device attached [ 194.757678][T15145] vhci_hcd: connection closed [ 194.757688][T15147] vhci_hcd: connection closed [ 194.757902][ T7397] vhci_hcd: stop threads [ 194.771399][ T7397] vhci_hcd: release socket [ 194.775818][ T7397] vhci_hcd: disconnect device [ 194.780976][ T7397] vhci_hcd: stop threads [ 194.785306][ T7397] vhci_hcd: release socket [ 194.789775][ T7397] vhci_hcd: disconnect device [ 194.793743][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2299'. [ 194.831941][T15157] loop4: detected capacity change from 0 to 256 [ 194.856612][T15159] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2301'. [ 195.013351][T15172] loop8: detected capacity change from 0 to 512 [ 195.041016][T15172] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.101217][T15180] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 195.162698][T15189] loop8: detected capacity change from 0 to 256 [ 195.179595][ T3644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.274808][T15197] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2315'. [ 195.290383][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2316'. [ 195.307742][T15193] netlink: 'syz.8.2314': attribute type 21 has an invalid length. [ 195.338463][T15207] loop8: detected capacity change from 0 to 512 [ 195.352140][T15209] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 195.361379][T15207] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.439071][T15222] loop8: detected capacity change from 0 to 512 [ 195.455587][T15222] EXT4-fs (loop8): orphan cleanup on readonly fs [ 195.462017][T15222] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 195.462028][T15227] loop6: detected capacity change from 0 to 512 [ 195.466463][T15227] EXT4-fs (loop6): orphan cleanup on readonly fs [ 195.470816][T15222] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, [ 195.476437][T15227] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 195.482807][T15222] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 195.491572][T15222] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.2323: attempt to clear invalid blocks 2 len 1 [ 195.501946][T15227] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 195.529525][T15228] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 195.535969][T15227] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2325: attempt to clear invalid blocks 2 len 1 [ 195.541244][T15228] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 195.541319][T15228] vhci_hcd vhci_hcd.0: Device attached [ 195.555195][T15227] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2325: invalid indirect mapped block 1819239214 (level 0) [ 195.581273][T15222] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2323: invalid indirect mapped block 1819239214 (level 0) [ 195.581979][T15227] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2325: invalid indirect mapped block 1819239214 (level 1) [ 195.600955][T15222] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2323: invalid indirect mapped block 1819239214 (level 1) [ 195.610374][T15235] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(7) [ 195.629591][T15235] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 195.629844][T15222] EXT4-fs (loop8): 1 truncate cleaned up [ 195.637190][T15235] vhci_hcd vhci_hcd.0: Device attached [ 195.644100][T15227] EXT4-fs (loop6): 1 truncate cleaned up [ 195.654072][T15228] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(6) [ 195.660642][T15228] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 195.668237][T15228] vhci_hcd vhci_hcd.0: Device attached [ 195.678589][T15227] program syz.6.2325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.692174][T15241] vhci_hcd: connection closed [ 195.692365][ T7345] vhci_hcd: stop threads [ 195.701320][ T7345] vhci_hcd: release socket [ 195.701973][T15243] netlink: 'syz.5.2328': attribute type 21 has an invalid length. [ 195.705828][ T7345] vhci_hcd: disconnect device [ 195.706096][T15238] vhci_hcd: connection closed [ 195.718978][T15230] vhci_hcd: connection closed [ 195.726521][ T7345] vhci_hcd: stop threads [ 195.735468][ T7345] vhci_hcd: release socket [ 195.740614][ T7345] vhci_hcd: disconnect device [ 195.746236][ T807] vhci_hcd: vhci_device speed not set [ 195.752709][T15248] program syz.8.2323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.771147][ T7345] vhci_hcd: stop threads [ 195.775425][ T7345] vhci_hcd: release socket [ 195.780071][ T7345] vhci_hcd: disconnect device [ 195.809757][ T807] usb 15-1: new full-speed USB device number 5 using vhci_hcd [ 195.828200][T15255] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 195.828534][ T807] usb 15-1: enqueue for inactive port 0 [ 195.846023][ T807] usb 15-1: enqueue for inactive port 0 [ 195.854869][T15257] loop6: detected capacity change from 0 to 512 [ 195.861207][ T807] usb 15-1: enqueue for inactive port 0 [ 195.872494][T15257] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.930120][ T807] vhci_hcd: vhci_device speed not set [ 196.020375][T15283] loop4: detected capacity change from 0 to 164 [ 196.029307][T15283] syz.4.2344: attempt to access beyond end of device [ 196.029307][T15283] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 196.047134][T15272] netlink: 'syz.6.2340': attribute type 21 has an invalid length. [ 196.163634][T15291] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 196.220065][ T3644] net_ratelimit: 3 callbacks suppressed [ 196.220082][ T3644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.250282][T15298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.263071][T15298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.284942][T15298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.294980][T15298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.303520][T15298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.315675][T15296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.379657][T15317] loop8: detected capacity change from 0 to 1024 [ 196.405161][T15317] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.2357: Allocating blocks 449-513 which overlap fs metadata [ 196.422772][T15315] EXT4-fs (loop8): pa ffff8881072630e0: logic 48, phys. 177, len 21 [ 196.430789][T15315] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 196.471027][T15314] netlink: 'syz.7.2355': attribute type 21 has an invalid length. [ 196.923665][T15332] loop6: detected capacity change from 0 to 164 [ 196.935797][T15330] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 196.942318][T15330] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 196.950226][T15330] vhci_hcd vhci_hcd.0: Device attached [ 196.960201][T15332] syz.6.2358: attempt to access beyond end of device [ 196.960201][T15332] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 196.961018][T15330] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(6) [ 196.980302][T15330] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.987969][T15330] vhci_hcd vhci_hcd.0: Device attached [ 197.021273][T15330] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(8) [ 197.027799][T15330] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 197.035582][T15330] vhci_hcd vhci_hcd.0: Device attached [ 197.043783][T15330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.052051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.062524][T15344] vhci_hcd: connection closed [ 197.062750][ T7328] vhci_hcd: stop threads [ 197.071717][ T7328] vhci_hcd: release socket [ 197.076190][ T7328] vhci_hcd: disconnect device [ 197.081155][T15337] vhci_hcd: connection closed [ 197.081239][T15333] vhci_hcd: connection closed [ 197.086178][ T7328] vhci_hcd: stop threads [ 197.095184][ T7328] vhci_hcd: release socket [ 197.099634][ T7328] vhci_hcd: disconnect device [ 197.107367][ T7328] vhci_hcd: stop threads [ 197.111663][ T7328] vhci_hcd: release socket [ 197.116091][ T7328] vhci_hcd: disconnect device [ 197.202006][ T29] kauditd_printk_skb: 992 callbacks suppressed [ 197.202022][ T29] audit: type=1326 audit(1756725021.975:13613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.5.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 197.240368][ T29] audit: type=1326 audit(1756725021.975:13614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.5.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 197.264256][ T29] audit: type=1326 audit(1756725021.975:13615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.5.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 197.268095][T15368] loop6: detected capacity change from 0 to 512 [ 197.288182][ T29] audit: type=1326 audit(1756725021.975:13616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.5.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 197.294806][ T3644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.318115][ T29] audit: type=1326 audit(1756725021.975:13617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.5.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 197.349560][ T29] audit: type=1326 audit(1756725021.975:13618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.5.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 197.373190][ T29] audit: type=1326 audit(1756725021.975:13619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.5.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 197.396748][ T29] audit: type=1326 audit(1756725021.975:13620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.5.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 197.415347][T15368] EXT4-fs (loop6): orphan cleanup on readonly fs [ 197.420329][ T29] audit: type=1326 audit(1756725021.975:13621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.5.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 197.426652][T15368] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 197.450242][ T29] audit: type=1326 audit(1756725021.975:13622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.5.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 197.483194][T15368] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 197.503598][T15368] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2374: attempt to clear invalid blocks 2 len 1 [ 197.529481][T15368] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2374: invalid indirect mapped block 1819239214 (level 0) [ 197.552263][T15368] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2374: invalid indirect mapped block 1819239214 (level 1) [ 197.576074][T15368] EXT4-fs (loop6): 1 truncate cleaned up [ 197.590007][T15368] program syz.6.2374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.605503][T15382] loop5: detected capacity change from 0 to 256 [ 197.657865][T15392] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 197.658273][T15391] IPVS: stopping master sync thread 15392 ... [ 197.714310][T15391] loop6: detected capacity change from 0 to 2048 [ 197.781246][T15391] loop6: unable to read partition table [ 197.787069][T15391] loop6: partition table beyond EOD, truncated [ 197.793257][T15391] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 197.812409][T15406] loop4: detected capacity change from 0 to 1024 [ 197.853478][T15406] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2388: Allocating blocks 449-513 which overlap fs metadata [ 197.873103][T15413] loop7: detected capacity change from 0 to 1024 [ 197.884636][T15405] EXT4-fs (loop4): pa ffff888107263070: logic 48, phys. 177, len 21 [ 197.892725][T15405] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 197.917932][T15413] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2390: Allocating blocks 449-513 which overlap fs metadata [ 197.935655][T15412] EXT4-fs (loop7): pa ffff8881072631c0: logic 48, phys. 177, len 21 [ 197.943748][T15412] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 197.954042][T15419] loop4: detected capacity change from 0 to 256 [ 198.013496][T15427] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 198.020143][T15427] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 198.027875][T15427] vhci_hcd vhci_hcd.0: Device attached [ 198.034638][T15427] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(6) [ 198.041161][T15427] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 198.048782][T15427] vhci_hcd vhci_hcd.0: Device attached [ 198.071508][T15427] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(8) [ 198.078128][T15427] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 198.085832][T15427] vhci_hcd vhci_hcd.0: Device attached [ 198.102602][T15433] vhci_hcd: connection closed [ 198.102758][T15431] vhci_hcd: connection closed [ 198.107631][ T7403] vhci_hcd: stop threads [ 198.116600][ T7403] vhci_hcd: release socket [ 198.121227][ T7403] vhci_hcd: disconnect device [ 198.123178][T15429] vhci_hcd: connection closed [ 198.126380][ T7403] vhci_hcd: stop threads [ 198.135360][ T7403] vhci_hcd: release socket [ 198.139854][ T7403] vhci_hcd: disconnect device [ 198.148073][ T7403] vhci_hcd: stop threads [ 198.152363][ T7403] vhci_hcd: release socket [ 198.156872][ T7403] vhci_hcd: disconnect device [ 198.209463][ T807] vhci_hcd: vhci_device speed not set [ 198.275024][T15455] loop4: detected capacity change from 0 to 512 [ 198.301296][T15455] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.598072][T15494] __nla_validate_parse: 20 callbacks suppressed [ 198.598087][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2402'. [ 198.667532][T15506] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2404'. [ 198.717971][T15506] loop7: detected capacity change from 0 to 1024 [ 198.733486][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2405'. [ 198.762908][T15515] loop5: detected capacity change from 0 to 1024 [ 198.792982][T15506] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2404: Allocating blocks 449-513 which overlap fs metadata [ 198.823476][T15515] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2405: Allocating blocks 449-513 which overlap fs metadata [ 198.851339][T15504] EXT4-fs (loop7): pa ffff8881071d95b0: logic 48, phys. 177, len 21 [ 198.859414][T15504] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 198.899493][T15514] EXT4-fs (loop5): pa ffff8881072632a0: logic 48, phys. 177, len 21 [ 198.907613][T15514] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 199.001199][T15545] loop5: detected capacity change from 0 to 256 [ 199.071933][T15561] loop8: detected capacity change from 0 to 512 [ 199.099625][T15561] EXT4-fs (loop8): orphan cleanup on readonly fs [ 199.106070][T15561] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 199.127650][T15568] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2411'. [ 199.129734][T15561] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 199.173696][T15561] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.2412: attempt to clear invalid blocks 2 len 1 [ 199.214056][T15573] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 199.226573][T15561] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2412: invalid indirect mapped block 1819239214 (level 0) [ 199.243251][T15576] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2416'. [ 199.252983][T15561] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2412: invalid indirect mapped block 1819239214 (level 1) [ 199.267415][T15573] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 199.273926][T15573] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 199.281583][T15573] vhci_hcd vhci_hcd.0: Device attached [ 199.301247][T15584] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 199.304198][T15561] EXT4-fs (loop8): 1 truncate cleaned up [ 199.307772][T15584] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 199.307802][T15584] vhci_hcd vhci_hcd.0: Device attached [ 199.330551][T15586] vhci_hcd: connection closed [ 199.330720][T15579] vhci_hcd: connection closed [ 199.335460][ T7403] vhci_hcd: stop threads [ 199.344530][ T7403] vhci_hcd: release socket [ 199.348938][ T7403] vhci_hcd: disconnect device [ 199.359548][ T7403] vhci_hcd: stop threads [ 199.363831][ T7403] vhci_hcd: release socket [ 199.368276][ T7403] vhci_hcd: disconnect device [ 199.397868][T15596] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2417'. [ 199.414289][T15596] loop7: detected capacity change from 0 to 1024 [ 199.448894][T15603] program syz.8.2412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.449476][T15596] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2417: Allocating blocks 449-513 which overlap fs metadata [ 199.482298][T15595] EXT4-fs (loop7): pa ffff888107263310: logic 48, phys. 177, len 21 [ 199.490406][T15595] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 199.512098][T15608] loop5: detected capacity change from 0 to 512 [ 199.531930][T15608] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.591381][T15623] loop5: detected capacity change from 0 to 256 [ 199.763941][T15662] loop7: detected capacity change from 0 to 512 [ 199.772804][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2436'. [ 199.783928][T15662] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.845096][T15672] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2428'. [ 199.846277][T15674] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 199.926480][T15686] loop8: detected capacity change from 0 to 164 [ 199.947182][T15686] syz.8.2434: attempt to access beyond end of device [ 199.947182][T15686] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 199.966066][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2438'. [ 199.972363][T15695] loop7: detected capacity change from 0 to 1024 [ 200.006828][T15695] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2439: Allocating blocks 449-513 which overlap fs metadata [ 200.034718][T15694] EXT4-fs (loop7): pa ffff8881072630e0: logic 48, phys. 177, len 21 [ 200.042826][T15694] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 200.064940][T15702] loop4: detected capacity change from 0 to 256 [ 200.071944][T15706] loop8: detected capacity change from 0 to 512 [ 200.081517][T15706] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.105455][T15710] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 200.162593][T15721] loop8: detected capacity change from 0 to 512 [ 200.170301][T15704] netlink: 'syz.5.2441': attribute type 21 has an invalid length. [ 200.178290][T15704] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2441'. [ 200.178683][T15721] EXT4-fs (loop8): orphan cleanup on readonly fs [ 200.193731][T15721] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 200.235507][T15721] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 200.270043][T15721] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.2446: attempt to clear invalid blocks 2 len 1 [ 200.284665][T15739] loop4: detected capacity change from 0 to 2048 [ 200.294467][T15721] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2446: invalid indirect mapped block 1819239214 (level 0) [ 200.297082][T15741] loop6: detected capacity change from 0 to 256 [ 200.309109][T15721] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2446: invalid indirect mapped block 1819239214 (level 1) [ 200.330639][T15743] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 200.352757][T15721] EXT4-fs (loop8): 1 truncate cleaned up [ 200.353358][T15739] loop4: p2 p3 p7 [ 200.439622][T15762] program syz.8.2446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.508062][T15753] netlink: 'syz.7.2460': attribute type 21 has an invalid length. [ 200.527651][T15777] loop4: detected capacity change from 0 to 164 [ 200.545740][T15777] syz.4.2468: attempt to access beyond end of device [ 200.545740][T15777] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 200.565051][T15781] loop5: detected capacity change from 0 to 256 [ 200.576927][T15783] program syz.6.2471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.636326][T15792] loop5: detected capacity change from 0 to 2048 [ 200.660655][T15798] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 200.696881][T15802] loop6: detected capacity change from 0 to 1024 [ 200.705672][T15792] loop5: p2 p3 p7 [ 200.735767][T15802] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2478: Allocating blocks 449-513 which overlap fs metadata [ 200.754220][T15801] EXT4-fs (loop6): pa ffff8881072630e0: logic 48, phys. 177, len 21 [ 200.762256][T15801] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 200.766884][T15815] program syz.5.2483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.804982][T15820] loop6: detected capacity change from 0 to 512 [ 200.812968][T15804] netlink: 'syz.4.2479': attribute type 21 has an invalid length. [ 200.825062][T15820] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.835834][T15819] loop7: detected capacity change from 0 to 256 [ 200.885339][T15832] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 200.916378][T15835] loop4: detected capacity change from 0 to 164 [ 200.925899][T15835] syz.4.2490: attempt to access beyond end of device [ 200.925899][T15835] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 200.926905][T15838] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 200.952368][T15838] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 200.958893][T15838] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 200.966538][T15838] vhci_hcd vhci_hcd.0: Device attached [ 200.975826][T15838] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8) [ 200.982352][T15838] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 200.990048][T15838] vhci_hcd vhci_hcd.0: Device attached [ 201.001349][T15844] vhci_hcd: connection closed [ 201.001536][T15839] vhci_hcd: connection closed [ 201.006763][ T7403] vhci_hcd: stop threads [ 201.015963][ T7403] vhci_hcd: release socket [ 201.020501][ T7403] vhci_hcd: disconnect device [ 201.026810][ T7403] vhci_hcd: stop threads [ 201.031203][ T7403] vhci_hcd: release socket [ 201.035633][ T7403] vhci_hcd: disconnect device [ 201.065498][T15854] loop7: detected capacity change from 0 to 512 [ 201.082027][T15854] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.158262][T15870] loop6: detected capacity change from 0 to 256 [ 201.214115][T15884] loop6: detected capacity change from 0 to 512 [ 201.226402][T15884] EXT4-fs (loop6): orphan cleanup on readonly fs [ 201.232848][T15884] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 201.248854][T15884] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 201.255222][T15890] loop8: detected capacity change from 0 to 1024 [ 201.272043][T15884] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2506: attempt to clear invalid blocks 2 len 1 [ 201.285329][T15884] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2506: invalid indirect mapped block 1819239214 (level 0) [ 201.299648][T15884] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2506: invalid indirect mapped block 1819239214 (level 1) [ 201.317527][T15890] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.2508: Allocating blocks 449-513 which overlap fs metadata [ 201.331869][T15884] EXT4-fs (loop6): 1 truncate cleaned up [ 201.341881][T15884] program syz.6.2506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.364830][T15889] EXT4-fs (loop8): pa ffff8881071d9380: logic 48, phys. 177, len 21 [ 201.372993][T15889] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 201.400716][T15899] loop6: detected capacity change from 0 to 512 [ 201.418133][T15899] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.429523][ T3644] net_ratelimit: 17 callbacks suppressed [ 201.429538][ T3644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.466373][T15909] loop8: detected capacity change from 0 to 256 [ 201.537550][T15924] loop8: detected capacity change from 0 to 512 [ 201.539215][T15924] EXT4-fs (loop8): orphan cleanup on readonly fs [ 201.550579][T15924] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 201.551564][T15924] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 201.573451][T15924] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.2521: attempt to clear invalid blocks 2 len 1 [ 201.573784][T15924] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2521: invalid indirect mapped block 1819239214 (level 0) [ 201.573915][T15924] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2521: invalid indirect mapped block 1819239214 (level 1) [ 201.619664][T15924] EXT4-fs (loop8): 1 truncate cleaned up [ 201.642217][T15931] loop6: detected capacity change from 0 to 164 [ 201.650926][T15931] syz.6.2522: attempt to access beyond end of device [ 201.650926][T15931] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 201.653635][T15924] program syz.8.2521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.727547][T15941] loop8: detected capacity change from 0 to 512 [ 201.746219][T15941] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.761618][T15946] loop6: detected capacity change from 0 to 256 [ 201.793547][T15948] loop6: detected capacity change from 0 to 164 [ 201.802020][T15948] syz.6.2528: attempt to access beyond end of device [ 201.802020][T15948] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 201.819541][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.883142][T15954] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 201.889676][T15954] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 201.897598][T15954] vhci_hcd vhci_hcd.0: Device attached [ 201.904079][T15954] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.917899][T15954] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 201.924435][T15954] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 201.932195][T15954] vhci_hcd vhci_hcd.0: Device attached [ 201.939257][T15954] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(9) [ 201.945961][T15954] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 201.953592][T15954] vhci_hcd vhci_hcd.0: Device attached [ 201.961868][T15962] vhci_hcd: connection closed [ 201.961966][T15957] vhci_hcd: connection closed [ 201.962151][T15955] vhci_hcd: connection closed [ 201.971625][T15965] loop4: detected capacity change from 0 to 1024 [ 201.972040][ T7397] vhci_hcd: stop threads [ 201.987043][ T7397] vhci_hcd: release socket [ 201.991570][ T7397] vhci_hcd: disconnect device [ 201.996431][ T7397] vhci_hcd: stop threads [ 202.000791][ T7397] vhci_hcd: release socket [ 202.005155][T15965] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2532: Allocating blocks 449-513 which overlap fs metadata [ 202.005255][ T7397] vhci_hcd: disconnect device [ 202.023706][T15964] EXT4-fs (loop4): pa ffff888107263310: logic 48, phys. 177, len 21 [ 202.024140][ T7397] vhci_hcd: stop threads [ 202.031851][T15964] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 202.036122][ T7397] vhci_hcd: release socket [ 202.050457][ T7397] vhci_hcd: disconnect device [ 202.089706][ T3644] vhci_hcd: vhci_device speed not set [ 202.380965][T15972] loop7: detected capacity change from 0 to 512 [ 202.388549][T15972] EXT4-fs (loop7): orphan cleanup on readonly fs [ 202.394928][T15972] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 202.405581][T15972] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 202.420256][T15972] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2534: attempt to clear invalid blocks 2 len 1 [ 202.433406][T15972] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2534: invalid indirect mapped block 1819239214 (level 0) [ 202.447915][T15972] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2534: invalid indirect mapped block 1819239214 (level 1) [ 202.462142][ T29] kauditd_printk_skb: 1020 callbacks suppressed [ 202.462156][ T29] audit: type=1326 audit(1756725027.225:14643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 202.476955][T15981] loop5: detected capacity change from 0 to 256 [ 202.491973][ T29] audit: type=1326 audit(1756725027.225:14644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 202.522011][ T29] audit: type=1326 audit(1756725027.225:14645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 202.526904][T15983] loop6: detected capacity change from 0 to 512 [ 202.545956][ T29] audit: type=1326 audit(1756725027.225:14646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 202.545989][ T29] audit: type=1326 audit(1756725027.225:14647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 202.546014][ T29] audit: type=1326 audit(1756725027.225:14648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 202.546107][ T29] audit: type=1326 audit(1756725027.225:14649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 202.554513][T15972] EXT4-fs (loop7): 1 truncate cleaned up [ 202.575928][ T29] audit: type=1326 audit(1756725027.225:14650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 202.576354][ T29] audit: type=1326 audit(1756725027.235:14651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 202.600113][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.623351][ T29] audit: type=1326 audit(1756725027.235:14652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.5.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed57daebe9 code=0x7ffc0000 [ 202.745639][T15972] program syz.7.2534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.759305][T15986] loop8: detected capacity change from 0 to 164 [ 202.760784][T15983] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.781382][T15986] syz.8.2540: attempt to access beyond end of device [ 202.781382][T15986] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 202.851385][T15995] loop7: detected capacity change from 0 to 1024 [ 202.878804][T15995] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2543: Allocating blocks 449-513 which overlap fs metadata [ 202.896279][T15994] EXT4-fs (loop7): pa ffff888107263310: logic 48, phys. 177, len 21 [ 202.904480][T15994] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 202.969454][T16011] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 202.970583][T16009] bridge_slave_1: left allmulticast mode [ 202.975988][T16011] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 202.981862][T16009] bridge_slave_1: left promiscuous mode [ 202.989416][T16011] vhci_hcd vhci_hcd.0: Device attached [ 202.995102][T16009] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.005430][T16011] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 203.019000][T16009] bridge_slave_0: left allmulticast mode [ 203.024729][T16009] bridge_slave_0: left promiscuous mode [ 203.030642][T16009] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.038585][T16011] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 203.045105][T16011] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 203.052733][T16011] vhci_hcd vhci_hcd.0: Device attached [ 203.063847][T16011] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(9) [ 203.070391][T16011] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 203.078285][T16011] vhci_hcd vhci_hcd.0: Device attached [ 203.089725][T16023] loop8: detected capacity change from 0 to 256 [ 203.093246][T16017] vhci_hcd: connection closed [ 203.096124][T16021] vhci_hcd: connection closed [ 203.096460][T16012] vhci_hcd: connection closed [ 203.101071][ T7397] vhci_hcd: stop threads [ 203.114691][ T7397] vhci_hcd: release socket [ 203.119105][ T7397] vhci_hcd: disconnect device [ 203.124024][ T7397] vhci_hcd: stop threads [ 203.128291][ T7397] vhci_hcd: release socket [ 203.132795][ T7397] vhci_hcd: disconnect device [ 203.138029][ T7397] vhci_hcd: stop threads [ 203.142322][ T7397] vhci_hcd: release socket [ 203.146770][ T7397] vhci_hcd: disconnect device [ 203.167670][T16025] loop8: detected capacity change from 0 to 164 [ 203.176788][T16025] syz.8.2552: attempt to access beyond end of device [ 203.176788][T16025] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 203.238202][T16030] loop7: detected capacity change from 0 to 512 [ 203.246426][T16030] EXT4-fs (loop7): orphan cleanup on readonly fs [ 203.252809][T16030] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 203.262653][T16030] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 203.277451][T16030] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2553: attempt to clear invalid blocks 2 len 1 [ 203.302810][T16030] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2553: invalid indirect mapped block 1819239214 (level 0) [ 203.312033][T16035] loop8: detected capacity change from 0 to 164 [ 203.324934][T16035] syz.8.2556: attempt to access beyond end of device [ 203.324934][T16035] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 203.338470][T16030] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2553: invalid indirect mapped block 1819239214 (level 1) [ 203.358610][T16030] EXT4-fs (loop7): 1 truncate cleaned up [ 203.363698][T16037] loop4: detected capacity change from 0 to 1024 [ 203.396766][T16037] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2557: Allocating blocks 449-513 which overlap fs metadata [ 203.401127][T16043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.424004][T16043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.423978][T16036] EXT4-fs (loop4): pa ffff8881071d9310: logic 48, phys. 177, len 21 [ 203.424038][T16036] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, [ 203.436642][T16043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.440395][T16036] free 0, pa_free 4 [ 203.450079][T16043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.468614][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.476708][T16043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.512515][T16042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.564820][T16053] loop8: detected capacity change from 0 to 256 [ 203.639274][T16065] loop5: detected capacity change from 0 to 164 [ 203.651170][T16065] syz.5.2568: attempt to access beyond end of device [ 203.651170][T16065] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 203.668580][T16069] loop6: detected capacity change from 0 to 512 [ 203.681166][T16069] EXT4-fs (loop6): orphan cleanup on readonly fs [ 203.687524][T16069] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 203.690830][T16072] loop4: detected capacity change from 0 to 164 [ 203.696629][T16069] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 203.718232][T16069] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2569: attempt to clear invalid blocks 2 len 1 [ 203.732578][T16069] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2569: invalid indirect mapped block 1819239214 (level 0) [ 203.747221][T16074] netlink: 'syz.8.2565': attribute type 21 has an invalid length. [ 203.756958][T16069] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2569: invalid indirect mapped block 1819239214 (level 1) [ 203.758433][T16076] __nla_validate_parse: 20 callbacks suppressed [ 203.758453][T16076] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2571'. [ 203.773920][T16069] EXT4-fs (loop6): 1 truncate cleaned up [ 203.791956][T16074] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2565'. [ 203.792582][T16076] loop7: detected capacity change from 0 to 1024 [ 203.807589][T16072] syz.4.2570: attempt to access beyond end of device [ 203.807589][T16072] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 203.865693][T16076] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2571: Allocating blocks 449-513 which overlap fs metadata [ 203.886212][T16075] EXT4-fs (loop7): pa ffff888107263460: logic 48, phys. 177, len 21 [ 203.894241][T16075] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 203.908395][T16090] loop5: detected capacity change from 0 to 256 [ 203.940746][T16094] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2577'. [ 203.960416][T16100] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 203.967106][T16100] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 203.974825][T16100] vhci_hcd vhci_hcd.0: Device attached [ 203.993252][T16100] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 204.011045][T16100] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 204.017637][T16100] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 204.025375][T16100] vhci_hcd vhci_hcd.0: Device attached [ 204.040706][T16100] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(9) [ 204.047235][T16100] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 204.054854][T16100] vhci_hcd vhci_hcd.0: Device attached [ 204.065414][T16110] vhci_hcd: connection closed [ 204.065547][ T7403] vhci_hcd: stop threads [ 204.070966][T16101] vhci_hcd: connection closed [ 204.074505][ T7403] vhci_hcd: release socket [ 204.083861][ T7403] vhci_hcd: disconnect device [ 204.090194][ T7403] vhci_hcd: stop threads [ 204.090996][T16105] vhci_hcd: connection closed [ 204.094495][ T7403] vhci_hcd: release socket [ 204.094504][ T7403] vhci_hcd: disconnect device [ 204.108931][ T7397] vhci_hcd: stop threads [ 204.113228][ T7397] vhci_hcd: release socket [ 204.117778][ T7397] vhci_hcd: disconnect device [ 204.136624][T16116] loop4: detected capacity change from 0 to 512 [ 204.144197][T16116] EXT4-fs (loop4): orphan cleanup on readonly fs [ 204.150719][T16116] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 204.159234][T16116] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 204.174392][T16116] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2583: attempt to clear invalid blocks 2 len 1 [ 204.187687][T16116] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2583: invalid indirect mapped block 1819239214 (level 0) [ 204.201877][T16116] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2583: invalid indirect mapped block 1819239214 (level 1) [ 204.216135][T16116] EXT4-fs (loop4): 1 truncate cleaned up [ 204.263146][T16121] loop4: detected capacity change from 0 to 128 [ 204.272945][T16121] Buffer I/O error on dev loop4, logical block 108, lost async page write [ 204.282767][T16121] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 204.292066][T16121] Buffer I/O error on dev loop4, logical block 124, lost async page write [ 204.301568][T16121] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 204.310614][T16121] Buffer I/O error on dev loop4, logical block 116, lost async page write [ 204.351955][T16122] netlink: 'syz.8.2585': attribute type 21 has an invalid length. [ 204.359905][T16122] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2585'. [ 204.457246][T16135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2589'. [ 204.471776][T16135] loop4: detected capacity change from 0 to 1024 [ 204.500683][T16135] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2589: Allocating blocks 449-513 which overlap fs metadata [ 204.520736][T16134] EXT4-fs (loop4): pa ffff888107263380: logic 48, phys. 177, len 21 [ 204.528791][T16134] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 204.558366][T16146] loop4: detected capacity change from 0 to 164 [ 204.578019][T16148] loop8: detected capacity change from 0 to 164 [ 204.587809][T16150] loop5: detected capacity change from 0 to 512 [ 204.595635][T16150] EXT4-fs (loop5): orphan cleanup on readonly fs [ 204.601998][T16150] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 204.611024][T16150] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 204.625812][T16150] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2595: attempt to clear invalid blocks 2 len 1 [ 204.640844][T16150] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2595: invalid indirect mapped block 1819239214 (level 0) [ 204.655784][T16150] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2595: invalid indirect mapped block 1819239214 (level 1) [ 204.670244][T16150] EXT4-fs (loop5): 1 truncate cleaned up [ 204.730802][T16159] program syz.5.2595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.779925][T16163] netlink: 'syz.4.2596': attribute type 21 has an invalid length. [ 204.787789][T16163] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2596'. [ 204.833802][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2604'. [ 204.855534][T16176] loop8: detected capacity change from 0 to 1024 [ 204.878994][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2606'. [ 204.899863][T16176] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.2604: Allocating blocks 449-513 which overlap fs metadata [ 204.931034][T16175] EXT4-fs (loop8): pa ffff8881071d92a0: logic 48, phys. 177, len 21 [ 204.939113][T16175] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 205.006413][T16196] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2611'. [ 205.137428][T16219] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2621'. [ 205.150688][T16219] loop8: detected capacity change from 0 to 1024 [ 205.158274][T16203] netlink: 'syz.4.2614': attribute type 21 has an invalid length. [ 205.180962][T16219] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.2621: Allocating blocks 449-513 which overlap fs metadata [ 205.200624][T16218] EXT4-fs (loop8): pa ffff8881071d9310: logic 48, phys. 177, len 21 [ 205.208731][T16218] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 205.228905][T16226] loop4: detected capacity change from 0 to 1024 [ 205.250379][T16231] loop6: detected capacity change from 0 to 512 [ 205.262455][T16231] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.284249][T16226] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2622: Allocating blocks 449-513 which overlap fs metadata [ 205.316351][T16225] EXT4-fs (loop4): pa ffff8881072633f0: logic 48, phys. 177, len 21 [ 205.324509][T16225] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 205.449655][T16255] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 205.459631][T16253] loop4: detected capacity change from 0 to 256 [ 205.497223][T16247] netlink: 'syz.6.2632': attribute type 21 has an invalid length. [ 205.522512][T16266] loop6: detected capacity change from 0 to 164 [ 205.531233][T16266] bio_check_eod: 13 callbacks suppressed [ 205.531246][T16266] syz.6.2639: attempt to access beyond end of device [ 205.531246][T16266] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 205.559273][T16268] loop5: detected capacity change from 0 to 1024 [ 205.581388][T16268] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2640: Allocating blocks 449-513 which overlap fs metadata [ 205.601450][T16267] EXT4-fs (loop5): pa ffff8881071d92a0: logic 48, phys. 177, len 21 [ 205.609536][T16267] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 205.696259][T16284] loop5: detected capacity change from 0 to 512 [ 205.704292][T16284] EXT4-fs (loop5): orphan cleanup on readonly fs [ 205.710692][T16284] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 205.726149][T16284] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 205.741469][T16284] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2646: attempt to clear invalid blocks 2 len 1 [ 205.756144][T16284] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2646: invalid indirect mapped block 1819239214 (level 0) [ 205.770403][T16284] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2646: invalid indirect mapped block 1819239214 (level 1) [ 205.785273][T16284] EXT4-fs (loop5): 1 truncate cleaned up [ 205.809995][T16291] loop7: detected capacity change from 0 to 256 [ 205.848977][T16294] program syz.5.2646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.936007][T16293] netlink: 'syz.7.2649': attribute type 21 has an invalid length. [ 205.944378][T16303] loop6: detected capacity change from 0 to 1024 [ 205.992188][T16303] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2652: Allocating blocks 449-513 which overlap fs metadata [ 206.013129][T16302] EXT4-fs (loop6): pa ffff888107263b60: logic 48, phys. 177, len 21 [ 206.021250][T16302] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 206.175274][T16341] loop7: detected capacity change from 0 to 256 [ 206.210635][T16348] loop7: detected capacity change from 0 to 1024 [ 206.234958][T16348] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2661: Allocating blocks 449-513 which overlap fs metadata [ 206.261288][T16347] EXT4-fs (loop7): pa ffff8881071d9310: logic 48, phys. 177, len 21 [ 206.269326][T16347] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 206.363218][T16382] loop4: detected capacity change from 0 to 164 [ 206.371995][T16382] syz.4.2666: attempt to access beyond end of device [ 206.371995][T16382] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 206.415106][T16393] loop7: detected capacity change from 0 to 1024 [ 206.422525][T16370] netlink: 'syz.8.2663': attribute type 21 has an invalid length. [ 206.456604][T16393] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2667: Allocating blocks 449-513 which overlap fs metadata [ 206.463099][T16405] loop8: detected capacity change from 0 to 512 [ 206.479473][T13379] net_ratelimit: 3 callbacks suppressed [ 206.479495][T13379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.495790][T16405] EXT4-fs (loop8): orphan cleanup on readonly fs [ 206.502197][T16405] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 206.520881][T16392] EXT4-fs (loop7): pa ffff8881071d92a0: logic 48, phys. 177, len 21 [ 206.528937][T16392] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 206.531792][T16405] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 206.580244][T16405] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.2668: attempt to clear invalid blocks 2 len 1 [ 206.601232][T16405] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2668: invalid indirect mapped block 1819239214 (level 0) [ 206.617693][T16405] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2668: invalid indirect mapped block 1819239214 (level 1) [ 206.639619][T16405] EXT4-fs (loop8): 1 truncate cleaned up [ 206.684165][T16422] loop4: detected capacity change from 0 to 256 [ 206.759819][T16440] program syz.8.2668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.790122][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.883652][T16467] loop7: detected capacity change from 0 to 512 [ 206.891750][T16443] netlink: 'syz.4.2678': attribute type 21 has an invalid length. [ 206.901528][T16467] EXT4-fs (loop7): orphan cleanup on readonly fs [ 206.907949][T16467] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 206.925000][T16467] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 206.941586][T16467] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2681: attempt to clear invalid blocks 2 len 1 [ 206.954906][T16467] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2681: invalid indirect mapped block 1819239214 (level 0) [ 206.955767][T16479] loop4: detected capacity change from 0 to 1024 [ 206.970463][T16467] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2681: invalid indirect mapped block 1819239214 (level 1) [ 206.990056][T16467] EXT4-fs (loop7): 1 truncate cleaned up [ 207.014439][T16479] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2682: Allocating blocks 449-513 which overlap fs metadata [ 207.033990][T16476] EXT4-fs (loop4): pa ffff8881072630e0: logic 48, phys. 177, len 21 [ 207.042074][T16476] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 207.052792][T16494] program syz.7.2681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.165266][T16515] loop4: detected capacity change from 0 to 256 [ 207.411028][T16531] netlink: 'syz.8.2692': attribute type 21 has an invalid length. [ 207.432823][T16536] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 207.437772][T16535] IPVS: stopping master sync thread 16536 ... [ 207.467471][T16535] loop8: detected capacity change from 0 to 2048 [ 207.474064][ T29] kauditd_printk_skb: 1006 callbacks suppressed [ 207.474099][ T29] audit: type=1326 audit(1756725032.245:15659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.8.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1ce349d84a code=0x7ffc0000 [ 207.503967][ T29] audit: type=1326 audit(1756725032.245:15660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.8.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ce349e7eb code=0x7ffc0000 [ 207.527614][ T29] audit: type=1326 audit(1756725032.245:15661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.8.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ce349e7eb code=0x7ffc0000 [ 207.550451][T16535] loop8: unable to read partition table [ 207.556739][T16535] loop8: partition table beyond EOD, truncated [ 207.562983][T16535] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 207.571156][ T29] audit: type=1326 audit(1756725032.345:15662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.8.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1ce349d3fa code=0x7ffc0000 [ 207.597073][ T29] audit: type=1326 audit(1756725032.345:15663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.8.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1ce349d3fa code=0x7ffc0000 [ 207.620795][ T29] audit: type=1326 audit(1756725032.345:15664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.8.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1ce349d3fa code=0x7ffc0000 [ 207.644413][ T29] audit: type=1326 audit(1756725032.345:15665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.8.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1ce349d3fa code=0x7ffc0000 [ 207.668060][ T29] audit: type=1326 audit(1756725032.345:15666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.8.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1ce349d3fa code=0x7ffc0000 [ 207.691702][ T29] audit: type=1326 audit(1756725032.345:15667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.8.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1ce349d3fa code=0x7ffc0000 [ 207.715315][ T29] audit: type=1326 audit(1756725032.345:15668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.8.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1ce349d3fa code=0x7ffc0000 [ 207.758983][T16540] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 207.811354][T16545] loop7: detected capacity change from 0 to 164 [ 207.819479][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.835126][T16545] syz.7.2698: attempt to access beyond end of device [ 207.835126][T16545] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 207.898993][T16559] loop6: detected capacity change from 0 to 1024 [ 207.937315][T16559] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2704: Allocating blocks 449-513 which overlap fs metadata [ 207.953130][T16568] loop7: detected capacity change from 0 to 512 [ 207.961710][T16558] EXT4-fs (loop6): pa ffff888107263af0: logic 48, phys. 177, len 21 [ 207.967592][T16568] EXT4-fs (loop7): orphan cleanup on readonly fs [ 207.969788][T16558] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, [ 207.976093][T16568] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 207.979322][T16568] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, [ 207.984527][T16558] free 0, pa_free 4 [ 207.992600][T16568] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 208.010233][T16570] netlink: 'syz.5.2703': attribute type 21 has an invalid length. [ 208.013942][T16568] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2706: attempt to clear invalid blocks 2 len 1 [ 208.034238][T16568] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2706: invalid indirect mapped block 1819239214 (level 0) [ 208.048390][T16568] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2706: invalid indirect mapped block 1819239214 (level 1) [ 208.063700][T16568] EXT4-fs (loop7): 1 truncate cleaned up [ 208.084225][T16568] program syz.7.2706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.150246][T16572] netlink: 'syz.8.2707': attribute type 21 has an invalid length. [ 208.241807][T16593] program syz.8.2713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.269993][T16594] loop6: detected capacity change from 0 to 256 [ 208.540105][T13379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.859590][ T8067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.982864][T16601] __nla_validate_parse: 20 callbacks suppressed [ 208.982902][T16601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2718'. [ 209.005488][T16601] loop4: detected capacity change from 0 to 1024 [ 209.015185][T16603] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 209.057676][T16610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2720'. [ 209.062473][T16601] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2718: Allocating blocks 449-513 which overlap fs metadata [ 209.085318][T16610] loop6: detected capacity change from 0 to 1024 [ 209.112071][T16615] loop7: detected capacity change from 0 to 512 [ 209.119713][T16600] EXT4-fs (loop4): pa ffff888107263b60: logic 48, phys. 177, len 21 [ 209.127795][T16600] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 209.131253][T16610] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2720: Allocating blocks 449-513 which overlap fs metadata [ 209.151825][T16616] netlink: 'syz.5.2719': attribute type 21 has an invalid length. [ 209.175179][T16615] EXT4-fs (loop7): orphan cleanup on readonly fs [ 209.181897][T16615] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 209.199446][T16616] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2719'. [ 209.209354][T16615] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 209.234813][T16609] EXT4-fs (loop6): pa ffff8881071d9310: logic 48, phys. 177, len 21 [ 209.242855][T16609] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 209.265691][T16615] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2721: attempt to clear invalid blocks 2 len 1 [ 209.308668][T16615] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2721: invalid indirect mapped block 1819239214 (level 0) [ 209.323936][T16626] netlink: 'syz.4.2722': attribute type 21 has an invalid length. [ 209.332202][T16615] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2721: invalid indirect mapped block 1819239214 (level 1) [ 209.350569][T16626] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2722'. [ 209.397655][T16629] loop6: detected capacity change from 0 to 164 [ 209.406313][T16615] EXT4-fs (loop7): 1 truncate cleaned up [ 209.422032][T16629] syz.6.2725: attempt to access beyond end of device [ 209.422032][T16629] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 209.462675][T16615] program syz.7.2721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.500825][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.522969][T16639] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 209.534499][T16638] IPVS: stopping master sync thread 16639 ... [ 209.570565][T16638] loop4: detected capacity change from 0 to 2048 [ 209.577049][T16642] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2731'. [ 209.705124][T16638] loop4: unable to read partition table [ 209.711788][T16649] loop6: detected capacity change from 0 to 512 [ 209.721615][T16638] loop4: partition table beyond EOD, truncated [ 209.727838][T16638] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 209.753799][T16649] EXT4-fs (loop6): orphan cleanup on readonly fs [ 209.760359][T16649] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 209.772657][T16649] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 209.789692][T16649] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2735: attempt to clear invalid blocks 2 len 1 [ 209.812679][T16649] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2735: invalid indirect mapped block 1819239214 (level 0) [ 209.886437][T16649] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2735: invalid indirect mapped block 1819239214 (level 1) [ 209.901774][ T3644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.951774][T16649] EXT4-fs (loop6): 1 truncate cleaned up [ 209.982010][T16659] netlink: 'syz.7.2738': attribute type 21 has an invalid length. [ 209.993258][T16664] loop5: detected capacity change from 0 to 512 [ 210.011889][T16659] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2738'. [ 210.023469][T16649] program syz.6.2735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.054028][T16664] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.124112][T16673] loop7: detected capacity change from 0 to 512 [ 210.175005][T16673] EXT4-fs (loop7): orphan cleanup on readonly fs [ 210.181395][T16673] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 210.222510][T16679] loop4: detected capacity change from 0 to 164 [ 210.241498][T16673] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 210.277661][T16679] syz.4.2744: attempt to access beyond end of device [ 210.277661][T16679] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 210.300769][T16673] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2742: attempt to clear invalid blocks 2 len 1 [ 210.331185][T16673] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2742: invalid indirect mapped block 1819239214 (level 0) [ 210.366199][T16684] loop6: detected capacity change from 0 to 256 [ 210.380452][T16673] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2742: invalid indirect mapped block 1819239214 (level 1) [ 210.448160][T16673] EXT4-fs (loop7): 1 truncate cleaned up [ 210.490840][T16673] program syz.7.2742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.552426][T16692] loop4: detected capacity change from 0 to 512 [ 210.581785][T16694] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2751'. [ 210.584703][T16692] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.617689][T16694] loop7: detected capacity change from 0 to 1024 [ 210.685316][T16694] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2751: Allocating blocks 449-513 which overlap fs metadata [ 210.732011][T16693] EXT4-fs (loop7): pa ffff888107263bd0: logic 48, phys. 177, len 21 [ 210.740082][T16693] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 210.773245][T16698] netlink: 'syz.6.2752': attribute type 21 has an invalid length. [ 210.781686][T16698] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2752'. [ 210.853038][T16709] loop4: detected capacity change from 0 to 164 [ 210.870940][T16709] syz.4.2755: attempt to access beyond end of device [ 210.870940][T16709] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 210.877364][T16713] loop7: detected capacity change from 0 to 2048 [ 210.921264][T16715] loop6: detected capacity change from 0 to 256 [ 210.949655][ T3644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.960007][ T3293] ================================================================== [ 210.968088][ T3293] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 210.976330][ T3293] [ 210.978646][ T3293] write to 0xffff888103263278 of 2 bytes by interrupt on cpu 1: [ 210.986255][ T3293] virtqueue_disable_cb+0x7a/0x150 [ 210.991347][ T3293] skb_xmit_done+0x65/0x140 [ 210.995859][ T3293] vring_interrupt+0x155/0x180 [ 211.000604][ T3293] __handle_irq_event_percpu+0x90/0x440 [ 211.006137][ T3293] handle_irq_event+0x64/0xf0 [ 211.010804][ T3293] handle_edge_irq+0x154/0x470 [ 211.015552][ T3293] __common_interrupt+0x60/0xb0 [ 211.020377][ T3293] common_interrupt+0x7e/0x90 [ 211.025048][ T3293] asm_common_interrupt+0x26/0x40 [ 211.030047][ T3293] kcsan_setup_watchpoint+0x415/0x430 [ 211.035410][ T3293] __vmap_pages_range_noflush+0x544/0xbd0 [ 211.041202][ T3293] __vmalloc_node_range_noprof+0xb53/0xe00 [ 211.046990][ T3293] vzalloc_noprof+0x82/0xc0 [ 211.051473][ T3293] bdev_disk_changed+0x327/0xcb0 [ 211.056391][ T3293] loop_set_status+0x5d2/0x6a0 [ 211.061132][ T3293] lo_ioctl+0x671/0x12b0 [ 211.065361][ T3293] blkdev_ioctl+0x34f/0x440 [ 211.069841][ T3293] __se_sys_ioctl+0xcb/0x140 [ 211.074430][ T3293] __x64_sys_ioctl+0x43/0x50 [ 211.078990][ T3293] x64_sys_call+0x1816/0x2ff0 [ 211.083642][ T3293] do_syscall_64+0xd2/0x200 [ 211.088123][ T3293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.093992][ T3293] [ 211.096382][ T3293] read to 0xffff888103263278 of 2 bytes by task 3293 on cpu 0: [ 211.103918][ T3293] virtqueue_disable_cb+0x58/0x150 [ 211.109013][ T3293] start_xmit+0x103/0x17a0 [ 211.113596][ T3293] dev_hard_start_xmit+0x125/0x3e0 [ 211.118689][ T3293] sch_direct_xmit+0x192/0x550 [ 211.123438][ T3293] __dev_queue_xmit+0xe9a/0x2000 [ 211.128357][ T3293] ip_finish_output2+0x77f/0x8b0 [ 211.133280][ T3293] ip_finish_output+0x114/0x2a0 [ 211.138119][ T3293] ip_output+0xbd/0x190 [ 211.142251][ T3293] __ip_queue_xmit+0xb4b/0xb80 [ 211.146993][ T3293] ip_queue_xmit+0x39/0x50 [ 211.151397][ T3293] __tcp_transmit_skb+0x1641/0x1a60 [ 211.156580][ T3293] tcp_write_xmit+0x1210/0x2fd0 [ 211.161409][ T3293] tcp_push_one+0x7e/0xa0 [ 211.165723][ T3293] tcp_sendmsg_locked+0x1cd0/0x2c00 [ 211.170906][ T3293] tcp_sendmsg+0x2f/0x50 [ 211.175200][ T3293] inet_sendmsg+0x76/0xd0 [ 211.179514][ T3293] __sock_sendmsg+0x102/0x180 [ 211.184194][ T3293] sock_write_iter+0x165/0x1b0 [ 211.188960][ T3293] vfs_write+0x52a/0x960 [ 211.193191][ T3293] ksys_write+0xda/0x1a0 [ 211.197411][ T3293] __x64_sys_write+0x40/0x50 [ 211.201982][ T3293] x64_sys_call+0x27fe/0x2ff0 [ 211.206634][ T3293] do_syscall_64+0xd2/0x200 [ 211.211114][ T3293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.216982][ T3293] [ 211.219301][ T3293] value changed: 0x0000 -> 0x0001 [ 211.224311][ T3293] [ 211.226609][ T3293] Reported by Kernel Concurrency Sanitizer on: [ 211.232799][ T3293] CPU: 0 UID: 0 PID: 3293 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 211.242668][ T3293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.252712][ T3293] ================================================================== [ 211.286389][T16720] loop5: detected capacity change from 0 to 164 [ 211.301934][T16720] syz.5.2761: attempt to access beyond end of device [ 211.301934][T16720] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 211.316663][T16713] loop7: unable to read partition table [ 211.322362][T16713] loop7: partition table beyond EOD, truncated [ 211.328518][T16713] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 211.979515][ T8067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.539572][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.019996][ T8067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.659567][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.059604][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.109527][ T3644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.139475][ T3644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.699472][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.179507][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.139570][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.229823][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.259513][ T3644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.739554][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.299546][ T8067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog