last executing test programs: 2m33.237319367s ago: executing program 3 (id=105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={0x0, r5}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x16) sendto$inet6(r4, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x20004010) 2m33.172750449s ago: executing program 3 (id=106): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x401, 0x28}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2) readv(r4, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x280, 0x99) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000001c0)=""/37, 0x25) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x104) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 2m33.035582501s ago: executing program 3 (id=109): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000001a80)=ANY=[], 0x56) 2m32.144849548s ago: executing program 3 (id=118): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlink(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x17, 0x2010}, 0x20) r1 = open(&(0x7f0000000540)='./bus\x00', 0x24700, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 2m32.104786609s ago: executing program 4 (id=119): prctl$PR_SET_NAME(0xf, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x44f0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 2m32.05411632s ago: executing program 3 (id=120): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000cc231c2df96ac7962ae7275a4555d300000000000d180100002012702500010000002020207b1af8ff00000094bfa1ab570000000007fb010000f8ffffffb702000008000000f703"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000043}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x40000000000000}, 0x18) fsopen(0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfff, 0x28400) ioctl$BLKZEROOUT(r2, 0x127f, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x1ff, {{0x2, 0x4c24, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x2) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xf3a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_SET_GS(0x1001, 0x0) r6 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m31.947333672s ago: executing program 4 (id=123): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c72, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {@acl}]}, 0xff, 0x260, &(0x7f0000000880)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r4, 0x0, 0x80, 0x8) splice(r3, 0x0, r2, 0x0, 0x100000004, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611858000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x1000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200080000eaffb6030000000000008500000083000000bf090000000000145509010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000f10000850000008600000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000002c0)) mmap$usbfs(&(0x7f0000226000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0x1) 2m31.097230619s ago: executing program 4 (id=127): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000007c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c6", 0xbf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000003c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424", 0xda}], 0x1}}], 0x2, 0x0) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m30.187398396s ago: executing program 4 (id=131): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlink(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x17, 0x2010}, 0x20) r1 = open(&(0x7f0000000540)='./bus\x00', 0x24700, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 2m29.920111161s ago: executing program 4 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000340), &(0x7f00000002c0)=r1}, 0xfffffdf4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) utimensat(r3, &(0x7f0000000640)='./file1/file0\x00', &(0x7f0000000680), 0x100) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc3ff, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4058880) ioctl$TCFLSH(r4, 0x5608, 0x0) 2m29.634846467s ago: executing program 4 (id=135): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000001a80)=ANY=[], 0x56) 2m29.634645107s ago: executing program 32 (id=135): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000001a80)=ANY=[], 0x56) 2m22.608123623s ago: executing program 3 (id=168): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00', @ANYRES32=0x0], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$netlink(0x10, 0x3, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x4010) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x48) r2 = io_uring_setup(0x6dc6, &(0x7f00000001c0)={0x0, 0xcf51, 0x400, 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 2m22.430853737s ago: executing program 33 (id=168): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00', @ANYRES32=0x0], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$netlink(0x10, 0x3, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x4010) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x48) r2 = io_uring_setup(0x6dc6, &(0x7f00000001c0)={0x0, 0xcf51, 0x400, 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 2m13.963917391s ago: executing program 6 (id=222): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = fcntl$dupfd(r2, 0x406, r2) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x6, 0xffffffff, 0x2, 0x5, 0x3}, &(0x7f0000000540)=0x98) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x141488c, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x776, &(0x7f0000000800)="$eJzs3c1rHOUfAPDvbJKmTfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBLSJ4EVQ8CHrp2Zd68+rLVf8LD2KpmhYrHiQym9l02+ymSZrsVvfzgck+z8xsnue78/I8u/MwE0DPGk3/5CIOR8T7ScRwNj+JiIF6qj/i5Np6t1aWD8TKcjGJ1dVXf0vq69xcWS5G03tSB7PMoxHx3TsRR3Iby60uLs0UyuXSfJYfr81eGK8uLh09P1uYLk2X5o5PTE4eO/HMieO7F+sfPy4duvbBS09+efKvtx+5+t73SZyMQ9my5jh2y2iMZp/JQPoR3uHF3S6sy5JuV4AdSQ/NvrWjPA7HcPTVUwDAf9mbEbEKAPSYRPsPAD2m8TvAzZXlYmPq7i8SnXX9hYjYvxb/rWxaW9KfXbPbX78OOnQzuePKSBIRI7tQ/mhEfPr165+nU+zRdUiAVt66HBFnR0Y3nv+TDWMWtuupTZbty15H75rv/Aed803a/3m2Vf8vt97/iRb9n8EWx+5O3PP4P7ALhWwi7f89vza27a7+3/qgtZG+LPe/ep9vIDl3vlxKz23/j4ixGBhM8xOblDF24+8b7ZY19/9+//CNz9Ly09fba+R+6R+88z1ThVrhfmJudv1yxGP9reJP1rd/0qb/e3qLZbz83LuftFuWxp/G25g2xh/Z6KS9sXol4omW2//2iLZk0/GJ4/XdYbyxU7Tw1U8fD7Urv3n7p1NafuO7QCek239o8/hHkubxmtXtl/HDleFv2y27d/yt9/99yWv1dKMfcalQq81PROxLXtk4/9jt9zbyjfXT+Mceb338b7b/p98Jz24x/v5rv36x8/j3Vhr/1La2//YTV2/N9LUrf2vbf7KeGsvmbOX8t9UK3s9nBwAAAAAAAAAAAAAAAAAAAAAAAABblYuIQ5Hk8uvpXC6fX3uG98MxlCtXqrUj5yoLc1NRf1b2SAzkGre6HG66H+pEdj/8Rv7YXfmnI+KhiPho8EDSuI/iVJdjBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICGg22e/5/6ebDbtQMA9sz+blcAAOg47T8A9B7tPwD0Hu0/APQe7T8A9B7tPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHvs9KlT6bT658pyMc1PXVxcmKlcPDpVqs7kZxeK+WJl/kJ+ulKZLpfyxcrsvf5fuVK5MBlzC5fGa6Vqbby6uHRmtrIwVztzfrYwXTpTGuhIVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwPdXFpZlCuVyal9hBYvXBqEb3E33Z7vSg1KejieTBqMYuJ7p8YgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4l/gnAAD//xdTIa8=") r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 2m13.707654875s ago: executing program 6 (id=224): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x835, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) preadv2(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, 0x0, 0x0) socket(0x10, 0x3, 0x0) timer_delete(r1) 2m12.241077624s ago: executing program 6 (id=233): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18) r1 = io_uring_setup(0x6c0a, &(0x7f0000000100)={0x0, 0x9705, 0x10, 0x0, 0x71}) r2 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r2, &(0x7f0000000680)={0xa, 0x4e23, 0x8899, @mcast2, 0xc8e}, 0x1c) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000180)=[0x282, 0x80000001], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x100}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) sendfile(r3, r4, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0xc100, 0x0) 2m11.599489047s ago: executing program 6 (id=239): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00Z\x00'/34], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x453, &(0x7f0000001d00)="$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") r1 = syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r1, &(0x7f0000000140), &(0x7f0000002200)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f0000000380)='kfree\x00', 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f00000001c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x38, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x38}}, 0x0) 2m10.571275787s ago: executing program 6 (id=246): socket$rds(0x15, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$kcm(0x2, 0x1, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 2m9.173916454s ago: executing program 6 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x40}, 0x18) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x18) syz_emit_ethernet(0xfffffc69, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) 2m9.157489134s ago: executing program 34 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x40}, 0x18) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x18) syz_emit_ethernet(0xfffffc69, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) 2m4.400831916s ago: executing program 1 (id=283): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x58130, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0xbdf7, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000003c0)) iopl(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000004c0)='\x00P\x00\x00\x01\x00\xbd\x03', &(0x7f0000000a40)="b38ea9c4", 0x4) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000280)='\x00H\xeb', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000800)='\x00.-&]\xe1\x19\t\xe88\xces`Z1\\\x98\x8b1\xb9\xc9\xe6\xf1\x94\x1e[\x8bs\x94\x80\x96\xf2\x02\x98+vv\x8a\xf7D\x19\x8cd\xa6\a\xe0S\xda2\b\xf1\xb5\x17V\x04\fm\xe4?0\x0fL\xc5\xba\xbb\x1di+Q~\xfa\x9a}m;\xe1\xcef8\xa0\x04\f\x15\x82!-\x91\x81\xac\xa3::\xc6\x9b\xa2\x13\xde&\xc4\x80\x8c\x15\x01\n\x81\xbf1\x96$\xeeQ\xe7\' RI\x1f\x00'/133, 0x0) close(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x2007ffc) getresgid(&(0x7f0000000c40), 0x0, &(0x7f0000000240)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2m3.571304942s ago: executing program 1 (id=287): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r2 = epoll_create(0xaf2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) epoll_pwait2(r2, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000200f}) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x4f, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x81, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) unlinkat(0xffffffffffffff9c, 0x0, 0x200) 2m3.398957406s ago: executing program 1 (id=290): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000040), 0x4) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0x1b35, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x1}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2004002, &(0x7f0000000080), 0x1, 0x571, &(0x7f0000001cc0)="$eJzs3c9vHFcdAPDvjH+sm6ZxAj1ABSRAIaAo69hpo6qXJhd+qKqEqDggDqmxN5bJrjdk16U2kXD/hiKBhDjAn8ABiQNSTxy4cUTigJDKASlABIqRQFo0s+PN1lnb23h/tN7PR5rMvHn75vte7N339q13XgAT60JE7ETEbES8ERHzxfmk2OJ6e8se9/DBvZXdB/dWkmi1Xv9Hkudn5/ICpUfXfLq45lxEfPOrEd9NHo/b2Nq+vVytVu4W6YVm7c5CY2v78nptea2yVtlYWrq2eO3KS1dfXDq8Aef6b+v52q/uf2X91W/99jeffu8PO1/+YVat00Xew58X7RiwdtNnOnEy0xHx6jCCjcFUsZ8dcz14MmlEfCwiPpc//+djKv/tBABOslZrPlrz3WkA4KRL8zmwJC1HRJoWg4Byew7v2TiVVuuN5qVb9c2N1fZc2dmYSW+tVytXzpX+9P38wTNJll7M8/L8PL20L321mKr7cempPF1eqVdXxzPkAYCJ93R3/x8R/y6labncV9Een+oBAB8Zc+OuAAAwcvp/AJg8+/v/r22MqSIAwKj08/a/+LB/Z9h1AQBG5IPN/58ZWj0AgNHx+T8ATB79PwBMlG+89lq2tXaL+3ivvrm1ebv+5uXVSuN2uba5Ul6p371TXqvX1/J79tSOul61Xr+z+EJsvrXQrDSaC42t7Zu1+uZG82Z+X++blZmRtAoAOMy58+/+MYmInZefyrfoWstBXw0nWzruCgBjM3WcwgYI8JFmtS+YXH114fkg4fdDrwswHj1v5j3X8/D9ftrevdNPEH9nBB8qFz/Z//y/NZ7hZDH/D5Pryfr0VwZeD2D0zP/D5Gq1kv1r/s92sgCAE+kYf8LX+tGgBiHAWB21mPdRn/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJDodEd+LJC3na4Gn2b9puRzxTEScjZnk1nq1ciUizsT5iJgpZenFcVcaADim9G9Jsf7XxfnnT+/PnU3+U8r3EfGDn73+k7eWm827i9n5f3bOl/aWD1t6VO4Y6woCAAOW999Lxb7rjfzDB/dW9rbeJaeHUp/7N+J/xVLEMffg3spuJ/505CdjLh9LnPpX0qnBXEQ8FxFTA4i/83ZEfKJX+5N8buRssfJpd/woYj8zqPhJJHFk/PR98dM8r73PBl8fH0BdYNK8eyMirvd6/qdxId/3fv7PDegV8f6N9sV2i9e+3a7400WkqR7xs+f8hX5jvPC7rz92sjXfzns74rnpXvGTTvzkgPjP9xn/z5/6zDuvHJDX+kXExegdvzvWQrN2Z6GxtX15vba8VlmrbCy1SovXrrx09cWlhXyOemFvpvpxf3/50pmD6pa1/9QB8ed6tn+2U/YLfbb/l/994zuffZQs7Y//pc/3/vk/2zN+W9YnfrHP+Munfn3g8t1Z/NUD2n/Uz/9Sn/Hf++v2ap8PBQBGoLG1fXu5Wq3cPdZB9i50ENd57CCrYn8P3hsuHi/oX2IYrej3YF/lZ4b1vzr0g+nOWPGDF79+SKlvZ3k9stK9X5LsrdLhIWbjoKzp6FkqfaJWDO3g4ahije81CRiNrs4HAAAAAAAAAAAAAAD4kDr6+0Azx/9aGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzJ/wMAAP//4Z7Fmg==") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001200010a000000000000000080000000d2df1ebef8c0f01457bc834e2ece7dcb18a6db4a5de21c2988efbc5f8cb27fe9350112bcfb2cc8e3f9c05390241a8281cf467fb7119b3b45cabb2c0b0fe230fc4379fc8b59564d8bc84405fe9856077763f5f827d4486047c8601dbb07dad36e272e919c0bd63562c5fcd84cf0a7e9f523ffb8f5ee07e85a555c6bd79b86b0e94321ce87f795099e06c58c89181ae75b9c1dd5c9d6f2f25478ac73e785e3ef4d3ab9f77a"], 0x26}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xb, &(0x7f0000000640)=ANY=[@ANYRES16=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400f460b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) 2m3.213064109s ago: executing program 1 (id=291): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r0 = syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r0, &(0x7f0000000140), &(0x7f0000002200)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f0000000380)='kfree\x00', 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f00000001c0)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f00000000010000000000", 0x1b) pwritev2(r1, &(0x7f0000000240)=[{}], 0x1, 0x7c00, 0x3000, 0x3) 2m2.287866667s ago: executing program 1 (id=296): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$kcm(0x10, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x22, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_pidfd_open(r2, 0x0) setns(r7, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 2m1.862200335s ago: executing program 1 (id=298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) 2m1.861954515s ago: executing program 35 (id=298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) 56.924576365s ago: executing program 8 (id=759): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x3}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000180), &(0x7f0000000280)=0x4) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x4}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 56.861031436s ago: executing program 8 (id=761): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x17) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0x20, &(0x7f0000000980)={&(0x7f0000001080)=""/239, 0xef, 0x0, &(0x7f0000000940)=""/61, 0x3d}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, 0x0, &(0x7f00000007c0)='syzkaller\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r5, 0x0, 0x0, 0x20004855) setsockopt$inet6_int(r5, 0x29, 0x4e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 56.624394391s ago: executing program 8 (id=774): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1a, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@gettaction={0x20, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x4000000) unshare(0x62000000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a001f000600142603600e1208000f007f370401a8001600a40003401c007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="41080000000029c0184ecbbf75f62c01ce6407e71fc9d50f484d8c9597aaed77affcc19041e9c993ba37d74c7ad7d3e44cea3e78906b6dafe01d4100d06a8cd5d9b315742b5bcf8c6b2d27492eaacc8854c2b9860f3530c3e14d03526e819b68ed9799dede87ca1b0a667a8592dafd467b86285fd2869f7e6957777972b7b2c344e39fa7305a51ed701df8677c5f5218d0a7a7887db0d2b2a0ce1a9575023482452ac53abd5c96f46458359807c712d045685437bdded96bd4677feb54fc3a6a8afadbacd525242a8ee9a8eab7ad3655c8621cf87835aea5e0f5401aeacabcf8406195c30d1ac92e23df3ddb"], 0x1, 0x11a3, &(0x7f0000001280)="$eJzs209rHGUcB/BfYjS6MTH+iyYXH/Sil8Hk4EG8BElAsqAkWSERhAnZ6LLr7rKzh13xkLMnX4d49CaobyDvordQKO0lp05ptk2aNj20pVloP5/LfOE7A8+PgYFnmDn+6o9fmgdFdpD3Y3JiIia7EekkRYrJuO8wPvvvy1u/b+3sbqxWq2ubKa2vbi9/kVKa++jfH3776+P/+zPf/z33z3Qczf94fGPl2tHC0eLx7e2fG0VqFKnd6ac87XU6/XyvVU/7jaKZpfRdq54X9dRoF/Xehf6g1el2hylv789Wur16UaS8PUzN+jD1O6nfG6b8p7zRTlmWpdlK8Cxqf56UZRlRlq/Ga1GWZflGVGIm3ozZmIu3Yj7ejnfi3Xgv3o+F+CA+jMXTs8a9bgAAAAAAAAAAAAAAAAAAAHix+P8fAAAAAAAAAAAAAAAAAAAAxm9rZ3djtVpd20zp9Yjrh4PaoDY6jvr1b6prn6dT8+dX3RwMaq+c9cujPl3sp6Nyr1+5tJ+KTz8Z9Xe7r7+tPtQvxf7zHx8AAABeClk6c+n+Psse14/SA+8HHtnfL01d2Rg8pWL4azNvteo9QRCEszDuJxNX4fymj3slAAAAAAAAAAAAPImr+Jxw3DMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd9iBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//+VQHgq") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'macvlan1\x00', &(0x7f0000000400)=@ethtool_gfeatures={0x3a, 0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000b00800000000000000000000d000000000000000000000009030000000000"], &(0x7f0000001b80)=""/4090, 0x3e, 0xffa, 0xa}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r3, 0x0, 0x3}, 0x18) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) 56.332488456s ago: executing program 8 (id=770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00Z\x00'/34], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x453, &(0x7f0000001d00)="$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") r1 = syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r1, &(0x7f0000000140), &(0x7f0000002200)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f0000000380)='kfree\x00', 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f00000001c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x38, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x38}}, 0x0) 55.432413784s ago: executing program 8 (id=777): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000440)=0x69721d2e, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000110000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@ifindex, 0xffffffffffffffff, 0x35, 0x18}, 0x20) getresuid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, r3, &(0x7f00000003c0)) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x2004d95, &(0x7f0000000480)={[{@barrier}]}, 0x1, 0x523, &(0x7f0000000a80)="$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") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x3, 0x7ffc0002}]}) r5 = fspick(r4, &(0x7f0000000000)='.\x00', 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) 54.1216592s ago: executing program 8 (id=786): pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x2) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x144}, 0x1, 0x0, 0x0, 0x8014}, 0x4000000) connect$rds(r1, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) 54.10252274s ago: executing program 36 (id=786): pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x2) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x144}, 0x1, 0x0, 0x0, 0x8014}, 0x4000000) connect$rds(r1, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) 8.073028543s ago: executing program 5 (id=1129): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000180)=ANY=[]) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000180), 0x0}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") 6.995886645s ago: executing program 5 (id=1135): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x30}, 0x2001}}, 0x6, 0x6}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') read(r1, 0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/220, 0xdc, 0x4009) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x100000000}, 0x18) unshare(0x2c020400) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ee, 0xffffffffffffffff) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000200), 0xfc26, 0x210000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000340)=""/171, &(0x7f00000001c0)=0xab) fallocate(r2, 0x0, 0x0, 0x8000c62) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x100000800000009) 6.515261234s ago: executing program 5 (id=1139): socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, 0x0) getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x5, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.879019126s ago: executing program 5 (id=1143): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c72, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {@acl}]}, 0xff, 0x260, &(0x7f0000000880)="$eJzs3U9IHFccB/DfzO7WqovY9lIo/QOllFYQeyv0Yi8tCEWklEJbsJTSS4sWjJKb5pRLDskxJMFTLhJyi8kxeJFcEgI5mcSDuQQSySGSQxLYsDsm+GeNxl13g/P5wDgz+ub93uB83wzCuAHkVm9EDEZEISL6IqIUEcnGBp9lS+/67mzn4mhEpfLzo6TWLtuvSl8d1x0RMxHxbUQspEn8W4yYmv995cnSj1+emCx9cX7+t84Wn2bN6sryT2vnho9fGvpm6satB8NJDEZ503k1X1Lne8Uk4v2DKPaWSIrtHgF7MXL04u1q7j+IiM9r+S9FGtkv7+TEOwul+PrsTseeenjzo1aOFWi+SqVUvQfOVIDcSSOiHEnaX3uCr26naX9/9gx/p9CV/jc+caTvn/HJsb/bPVMBzVKOWP7hSsfl7i35v1/I8g8cUtkfpZZ/GZm7W91YK9Rt1dPaQQEH7uNsVb3/9/05/VXsnH/gkJJ/yC/5h/ySf8gv+Yf8kn/IqZL8Q57JP+SX/EN+7Tv/p58f3KCAltiYfwAgXyod+3pruPkvIgMt1+75BwAAAAAAAAAAAAAAAAAA2G62c3H05dKcHou7trh2JmL1+6zp9vqF2ucRR7xb+9r1ONnUY7KnCq/3x6cNdtCgC21++7rnXnvrX/+kvfWnxyJmjkXEQLG4/fpL1q+//Xtvl5+X/mqwwBtKtux/92tr62/1bK699YeWIq5W55+BevNPGh/W1vXnn3L2b9Qb8v/TBjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgZV4EAAD//1SRbe0=") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r4, 0x0, 0x80, 0x8) splice(r3, 0x0, r2, 0x0, 0x100000004, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000075b0"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x1000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200080000eaffb6030000000000008500000083000000bf090000000000145509010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000f10000850000008600000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000002c0)) mmap$usbfs(&(0x7f0000226000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0x1) 5.795717688s ago: executing program 0 (id=1145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x148, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @offload={0xc, 0x1c, {r7, 0x3}}]}, 0x148}, 0x1, 0x0, 0x0, 0x880}, 0x2000) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0x2, 0x73) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 4.961650284s ago: executing program 0 (id=1160): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c72, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {@acl}]}, 0xff, 0x260, &(0x7f0000000880)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r4, 0x0, 0x80, 0x8) splice(r3, 0x0, r2, 0x0, 0x100000004, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000075b0"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x1000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200080000eaffb6030000000000008500000083000000bf090000000000145509010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000f10000850000008600000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000002c0)) mmap$usbfs(&(0x7f0000226000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0x1) 4.960508354s ago: executing program 5 (id=1161): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)=',-\x10*\xc8+\x14\xc6@\xcf\xb1;\xb5\xee;\x00\xee7\x9f\x9b\x17\x8dv\xed\x96M\xc1\x0ezw\xea\xccgl{\xa9I\xe6\xe6G\x8e2\xb6\xc2\"$0=\x89\xe6\tt\xaf\xea\xfc_<(]\xf6kFNE}\xd6\x13\xc8idz\xff\xff\x00\x00\x89y\xc1b\x9d\x818\xaa0D\xaf\xa1\x82\xa5.\xa3\"\xe5\x19{!\xc6\xa5\xb4\xddw3\t\x00\x00\xd0\x9b\x81`{R9A$z\x90\x90\x80\x8euj\xb4P\x96\x9b\x1f\xc5^\xc0\xf3\xa5\xd1\xf2\x02\xa5Z^c\xef2E\x1f\xf3 \xcc\xd0P3\x12\xe0\xefv\xaf\xe1.\xea\xebgF\xa5\x92|\x9b\xba\xc4\x1c\x8a\xf6\v\x94\n\xb9\x7f3YR\xc3wMd\xd2\xdf\xd2\xbb\xff\xe3\xb6\xd8\xd0r\xc0\xca\xc7\xfa\x0efX\x85\xcde\xc7\x88L\x1c\x9bw\x15!!\xb8\x06l\xb9\xf7\x82%sb\xc0\x89m\x16\b4\x87\x8a\xb0\x02\xd8\xc5\xbc\xc3\x9c\xabF\xd1x\xc4\xc2b\x1b\xb1\xbc\xb5*\xd7\x19\xe2\xc6\x04\xfa\xf0Hbk\xc7\xce\xbdQ\x06\x84\x04Dc\x81\x02\'\x95\xe9\xb2*s\xf9\xe0\x14\x88\xea\x85\x01\xed\v\x05\xe1P\xef\xf3^\x10s\xa3\xce\xd2/\xd3>w\x8d\x11\x00\xb2\xff\x88\xa9\xe7\x8c\xf0\xcf\xd6u\xff\xc1%N\xe7\xc3T\x19\x93\xd0\b\xd3K\xb1\r\xd0DXN\x98\x01\x88\xcc\xdc\xf2\x12\xaf\xa0o?wg\xb0\xf4-p\xa9-\v\t\x04\x15\xf6\xecOp\xfd`\x1bu}1x\x99\x88\xaaA\xb9 \xbeB3^\xa1\x9e\xa2\x1cz\x8a\xe4\xf9\xa0\xd9\xc5\xben;\x1aLGZ\xf4\xdapbH.\xc4\x12\xf0\x94\x943\xe8r\x89\x8cy\x02d\xe5B\x16\xe3\xb8dnP]\xc2\xfe\xd6D\x92\x1df\xe7\xdb\x9e(\x7f\a\xac\x19X\xd7GK\xb8M\x1c#\x94\xc7&\xda\xc2\xb1\xf3\x1a\xecI}1M\x9b\x9f\xcb\xa3v\x9f\x89\xd2Q\x8b\"\x8d\x98E\xa5\x8bT\xfb\"\xa8\xe5X\xac\xd2\xd3k\xefd;>\xf9\xb1O\x13L#\xe0\x01\x9a\x90\xd9\xc6\x8d\xcb!\xbeZ\x8b\x90\b\xf5\xc2\nA\x06\xd8O\xa7}E\xb47\xb9@\xcc\x8c\x06\xfe\x81EH\x84\xb6\xbe\x19\xa3\xbao!', &(0x7f0000000a40)='$\x00-<\x00-\xc7\xf2\xd74!\xdc\x97{%-\x9c\x1eY\xd2\x9a\x86\xa6\xa6\xf8Og\x1d\xff\x1f\x86\xeb\x9f\xad-\xa5\xf5 \'\xa8W\xef\xc6=\xfc\xa7\xb0$Hs\xcf!\xe9\'t\b\x14\xa2\xc9\xc6\xb4}\xea\x05\xc5\xba}W\x1b3\xdcE\x90\x85\x1d\x1a`\xb9\x06\xd2tRy\xdd\x8c\x9a\f\x11[\x86 \xa34g\x1f\xfap\x84.\x81\xd1\xced\xc9$\xeb\xe4\xd9}\x84\x8d\x18\xd0\xc6|3\xbd\x92u_\xbel\v\xd6\xb5\xd4E\xcf\xce\x93\xe5e\xecn\x0eEz\xb0@\x8d_m/\x1a\xec\xbc\xe0\xb2\x8eW\x14\xca\xf1\t\xda\xba\xec\x19\x0fTc\xd0\xf7\xdc\xf02\x04`\x18M\xfc\r\xaa\xef\xc7', 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket(0x2d, 0x2, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000010c0)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x5, 0x2, 0x29}, 0x2c) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4) pipe2$9p(&(0x7f0000000040), 0x80) syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffffe, 0x302) 4.6520729s ago: executing program 5 (id=1152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00Z\x00'/34], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x453, &(0x7f0000001d00)="$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") r1 = syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r1, &(0x7f0000000140), &(0x7f0000002200)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f0000000380)='kfree\x00', 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f00000001c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x38, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x38}}, 0x0) 3.828643936s ago: executing program 0 (id=1166): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c72, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {@acl}]}, 0xff, 0x260, &(0x7f0000000880)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r4, 0x0, 0x80, 0x8) splice(r3, 0x0, r2, 0x0, 0x100000004, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000075b0"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611858"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x1000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200080000eaffb6030000000000008500000083000000bf090000000000145509010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000f10000850000008600000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000002c0)) mmap$usbfs(&(0x7f0000226000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0x1) 3.800617927s ago: executing program 9 (id=1167): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c72, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {@acl}]}, 0xff, 0x260, &(0x7f0000000880)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r4, 0x0, 0x80, 0x8) splice(r3, 0x0, r2, 0x0, 0x100000004, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000075b0"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611858000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x1000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200080000eaffb6030000000000008500000083000000bf090000000000145509010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000f10000850000008600000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000002c0)) mmap$usbfs(&(0x7f0000226000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0x1) 3.785596737s ago: executing program 7 (id=1154): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2002b71ec95c63208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2312ce", 0xb8) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xd344) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x59b, &(0x7f0000002480)="$eJzs3T1sG2UfAPD/2fGbfuRt+krvK72gDhUgFamqk/QDClO7IipV6oDEUizHjaI4cRQ70EQZ0r1CdECAupQNBkYQAwNiQWJhZQExI1U0AqnpAEb+StvEDk6p6zT+/aSz77nn7P/z3Pl/9nO6kwMYWEdrD6mIZyLiYhIx+kDdUDQrjzbWW19byd9bW8knUa1e+jWJJCLurq3kW+snzeeDEbEaEf+PiG8yEcdTW+OWl5ZncsViYaFZHqvMzo+Vl5ZPTM/mpgpThblTL79y5uzpMxMnJzo3PrOzvl7/6ca7179/7daNTz87spp/P5fEuRhp1j3Yj8epsU0ycW7T8tO9CNZHSb8bwCNJN/O8lkr/i9FIN7O+neroE20a0GPV4YjqTiSrO1od2M2SneU/sGe0fgfUxr9th9Pp3v7+uH2+MQCpxV9vTo2aoca5idhXH5sc+C15aGRSG28e7m3TGACr1yJifGio9vlrTY2apPn5e3Tjj6OB9NTX5xs7auv+T20cf6LN8Wekde70H2od/9a3HP/ux093OP5d7DLGH2/+/FHH+Ncinm0bP9mIn7SJn4qIt7qMf/ONL892qqt+HHEs2sdvSbY/Pzx2ZbpYGG88to3x1bEjr27X/wMd4jfO2e6rf8202/7zXfb/i28/f251m/gvPr/9/m+3/fdHxHtdxv/P3U9e71R3+1pyp/YrYKf7v7bsVpfxXzp39McOVfu7fAsAAAAAAAAAAKCNVP1atiSV3ZhPpbLZxj28/40DqWKpXDl+pbQ4N9m45u1wZFKtK61GG+WkVp5oXo/bKp/cVD7Vuo44vb9ezuZLxck+9x0AAAAAAAAAAAAAAAAAAAB2i4Ob7v//PV2//3/z31UDe1Xnv/wG9jr5D4Pr4fxPIob71hTgCfP9DwOrKv9hcMl/GFzyHwaX/IfBJf9hcMl/GFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAeuLihQu1qXpvbSVfK08OLS3OlN4+MVkoz2RnF/PZfGlhPjtVKk0VC9l8afbv3q9YKs2Px9zi1bFKoVwZKy8tX54tLc5VLk/P5qYKlwuZJ9IrAAAAAAAAAAAAAAAAAAAAeLqM1KcklY2IVH0+lcpmI/4dEYcjk1yZLhbGI+JQRPyQzgzXyhP9bjQAAAAAAAAAAAAAAAAAAADsMeWl5ZlcsVhYGJCZoS1Lvuu8ckSsPt5m1N5xR68anskVM819tVu24dM2c2j7ddLR9xbuxpk+H5gAAAAAAAAAAAAAAAAAAGAA3b/pt9tX/NnbBgEAAAAAAAAAAAAAAAAAAMBASv2SRERtOjb6wsjm2n8l6+n6c0S8c/PSB1dzlcrCRG35nY3llQ+by0/2o/1At1p52spjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L7y0vJMrlgsLPRwpt99BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgUfwUAAP//H1DQ4Q==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000002172b4ce359280e2004d02000000000000000000000000380001"], 0x78) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) 2.944743753s ago: executing program 9 (id=1158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r5 = syz_open_pts(r4, 0x8182) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000000)={0x2, 0x9, 0x8, 0x8, 0x5, "6c2a0a5692c16ea0c38f93b1a2f388a5d2b72a"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 2.944486973s ago: executing program 2 (id=1159): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) shmctl$IPC_INFO(0x0, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(0xffffffffffffffff, 0x3) accept(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r5}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.932980283s ago: executing program 7 (id=1162): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x0, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r10}, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240029c900"/20, @ANYRES16=r9, @ANYBLOB="01002dbd7000ffdbdf2518000000080030800400018008000300", @ANYRES32=r11, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x40084) 2.928848874s ago: executing program 0 (id=1172): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c72, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {@acl}]}, 0xff, 0x260, &(0x7f0000000880)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r4, 0x0, 0x80, 0x8) splice(r3, 0x0, r2, 0x0, 0x100000004, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000075b0"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611858"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x1000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200080000eaffb6030000000000008500000083000000bf090000000000145509010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000f10000850000008600000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000002c0)) mmap$usbfs(&(0x7f0000226000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0x1) 1.886444924s ago: executing program 7 (id=1164): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)=',-\x10*\xc8+\x14\xc6@\xcf\xb1;\xb5\xee;\x00\xee7\x9f\x9b\x17\x8dv\xed\x96M\xc1\x0ezw\xea\xccgl{\xa9I\xe6\xe6G\x8e2\xb6\xc2\"$0=\x89\xe6\tt\xaf\xea\xfc_<(]\xf6kFNE}\xd6\x13\xc8idz\xff\xff\x00\x00\x89y\xc1b\x9d\x818\xaa0D\xaf\xa1\x82\xa5.\xa3\"\xe5\x19{!\xc6\xa5\xb4\xddw3\t\x00\x00\xd0\x9b\x81`{R9A$z\x90\x90\x80\x8euj\xb4P\x96\x9b\x1f\xc5^\xc0\xf3\xa5\xd1\xf2\x02\xa5Z^c\xef2E\x1f\xf3 \xcc\xd0P3\x12\xe0\xefv\xaf\xe1.\xea\xebgF\xa5\x92|\x9b\xba\xc4\x1c\x8a\xf6\v\x94\n\xb9\x7f3YR\xc3wMd\xd2\xdf\xd2\xbb\xff\xe3\xb6\xd8\xd0r\xc0\xca\xc7\xfa\x0efX\x85\xcde\xc7\x88L\x1c\x9bw\x15!!\xb8\x06l\xb9\xf7\x82%sb\xc0\x89m\x16\b4\x87\x8a\xb0\x02\xd8\xc5\xbc\xc3\x9c\xabF\xd1x\xc4\xc2b\x1b\xb1\xbc\xb5*\xd7\x19\xe2\xc6\x04\xfa\xf0Hbk\xc7\xce\xbdQ\x06\x84\x04Dc\x81\x02\'\x95\xe9\xb2*s\xf9\xe0\x14\x88\xea\x85\x01\xed\v\x05\xe1P\xef\xf3^\x10s\xa3\xce\xd2/\xd3>w\x8d\x11\x00\xb2\xff\x88\xa9\xe7\x8c\xf0\xcf\xd6u\xff\xc1%N\xe7\xc3T\x19\x93\xd0\b\xd3K\xb1\r\xd0DXN\x98\x01\x88\xcc\xdc\xf2\x12\xaf\xa0o?wg\xb0\xf4-p\xa9-\v\t\x04\x15\xf6\xecOp\xfd`\x1bu}1x\x99\x88\xaaA\xb9 \xbeB3^\xa1\x9e\xa2\x1cz\x8a\xe4\xf9\xa0\xd9\xc5\xben;\x1aLGZ\xf4\xdapbH.\xc4\x12\xf0\x94\x943\xe8r\x89\x8cy\x02d\xe5B\x16\xe3\xb8dnP]\xc2\xfe\xd6D\x92\x1df\xe7\xdb\x9e(\x7f\a\xac\x19X\xd7GK\xb8M\x1c#\x94\xc7&\xda\xc2\xb1\xf3\x1a\xecI}1M\x9b\x9f\xcb\xa3v\x9f\x89\xd2Q\x8b\"\x8d\x98E\xa5\x8bT\xfb\"\xa8\xe5X\xac\xd2\xd3k\xefd;>\xf9\xb1O\x13L#\xe0\x01\x9a\x90\xd9\xc6\x8d\xcb!\xbeZ\x8b\x90\b\xf5\xc2\nA\x06\xd8O\xa7}E\xb47\xb9@\xcc\x8c\x06\xfe\x81EH\x84\xb6\xbe\x19\xa3\xbao!', &(0x7f0000000a40)='$\x00-<\x00-\xc7\xf2\xd74!\xdc\x97{%-\x9c\x1eY\xd2\x9a\x86\xa6\xa6\xf8Og\x1d\xff\x1f\x86\xeb\x9f\xad-\xa5\xf5 \'\xa8W\xef\xc6=\xfc\xa7\xb0$Hs\xcf!\xe9\'t\b\x14\xa2\xc9\xc6\xb4}\xea\x05\xc5\xba}W\x1b3\xdcE\x90\x85\x1d\x1a`\xb9\x06\xd2tRy\xdd\x8c\x9a\f\x11[\x86 \xa34g\x1f\xfap\x84.\x81\xd1\xced\xc9$\xeb\xe4\xd9}\x84\x8d\x18\xd0\xc6|3\xbd\x92u_\xbel\v\xd6\xb5\xd4E\xcf\xce\x93\xe5e\xecn\x0eEz\xb0@\x8d_m/\x1a\xec\xbc\xe0\xb2\x8eW\x14\xca\xf1\t\xda\xba\xec\x19\x0fTc\xd0\xf7\xdc\xf02\x04`\x18M\xfc\r\xaa\xef\xc7', 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket(0x2d, 0x2, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000010c0)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x5, 0x2, 0x29}, 0x2c) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4) pipe2$9p(&(0x7f0000000040), 0x80) syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffffe, 0x302) 1.708905897s ago: executing program 7 (id=1165): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r0) r4 = add_key$keyring(&(0x7f0000000500), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000200)=0xc) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) 1.708659487s ago: executing program 0 (id=1168): socket(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r0 = syz_io_uring_setup(0x42e2, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x20040}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_usbip_server_init(0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x6000, @fd_index=0xa, 0x3, 0xf7e0, 0xfecc, 0xa, 0x0, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 1.707947707s ago: executing program 9 (id=1169): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl(0xffffffffffffffff, 0x8b1a, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xa}}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_virt_wifi\x00'}]}}]}, 0x4c}}, 0x24040084) 1.699115228s ago: executing program 2 (id=1170): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000180)=ANY=[]) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000180), 0x0}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 1.373013244s ago: executing program 2 (id=1171): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x103100) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 1.372777434s ago: executing program 7 (id=1173): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c72, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {@acl}]}, 0xff, 0x260, &(0x7f0000000880)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r4, 0x0, 0x80, 0x8) splice(r3, 0x0, r2, 0x0, 0x100000004, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000075b0"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611858000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x1000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200080000eaffb6030000000000008500000083000000bf090000000000145509010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000f10000850000008600000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000002c0)) mmap$usbfs(&(0x7f0000226000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0x1) 753.880746ms ago: executing program 9 (id=1174): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ptrace$pokeuser(0x6, 0x0, 0x358, 0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000780)) newfstatat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x6000) gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001340)={{{@in=@private, @in=@initdev}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@loopback}}, &(0x7f00000005c0)=0x128) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x52c, &(0x7f0000000880)="$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") r3 = msgget$private(0x0, 0x200) stat(&(0x7f0000000140)='./file2\x00', &(0x7f0000000280)) bpf$MAP_CREATE(0x0, 0x0, 0x48) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x94, 0x1) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) statx(r2, 0x0, 0x800, 0x2, 0x0) msgctl$IPC_SET(r3, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2000c140) 471.366281ms ago: executing program 2 (id=1175): syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000003, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0xb, 0x7, 0x7f}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000440), &(0x7f0000000480)=[{0x2, 0x4, 0x9, 0x5}, {0x3, 0x4, 0x7, 0xb}, {0x0, 0x3, 0x4, 0x4}, {0x2, 0x1, 0x7, 0x2}, {0x0, 0x3, 0x3, 0x7}, {0x5, 0x3, 0x7, 0x1}, {0x4, 0x2, 0xc, 0xc}], 0x10, 0x6}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42842, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(r1, &(0x7f0000000080)=""/22, 0x16, 0x2) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x43403d0e, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 443.316502ms ago: executing program 0 (id=1176): socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/92, 0x5c}], 0x1}}], 0x1, 0x0, 0x0) sendto(r5, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 443.137732ms ago: executing program 7 (id=1177): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c72, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {@acl}]}, 0xff, 0x260, &(0x7f0000000880)="$eJzs3U9IHFccB/DfzO7WqovY9lIo/QOllFYQeyv0Yi8tCEWklEJbsJTSS4sWjJKb5pRLDskxJMFTLhJyi8kxeJFcEgI5mcSDuQQSySGSQxLYsDsm+GeNxl13g/P5wDgz+ub93uB83wzCuAHkVm9EDEZEISL6IqIUEcnGBp9lS+/67mzn4mhEpfLzo6TWLtuvSl8d1x0RMxHxbUQspEn8W4yYmv995cnSj1+emCx9cX7+t84Wn2bN6sryT2vnho9fGvpm6satB8NJDEZ503k1X1Lne8Uk4v2DKPaWSIrtHgF7MXL04u1q7j+IiM9r+S9FGtkv7+TEOwul+PrsTseeenjzo1aOFWi+SqVUvQfOVIDcSSOiHEnaX3uCr26naX9/9gx/p9CV/jc+caTvn/HJsb/bPVMBzVKOWP7hSsfl7i35v1/I8g8cUtkfpZZ/GZm7W91YK9Rt1dPaQQEH7uNsVb3/9/05/VXsnH/gkJJ/yC/5h/ySf8gv+Yf8kn/IqZL8Q57JP+SX/EN+7Tv/p58f3KCAltiYfwAgXyod+3pruPkvIgMt1+75BwAAAAAAAAAAAAAAAAAA2G62c3H05dKcHou7trh2JmL1+6zp9vqF2ucRR7xb+9r1ONnUY7KnCq/3x6cNdtCgC21++7rnXnvrX/+kvfWnxyJmjkXEQLG4/fpL1q+//Xtvl5+X/mqwwBtKtux/92tr62/1bK699YeWIq5W55+BevNPGh/W1vXnn3L2b9Qb8v/TBjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgZV4EAAD//1SRbe0=") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r4, 0x0, 0x80, 0x8) splice(r3, 0x0, r2, 0x0, 0x100000004, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000075b0"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611858"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x1000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200080000eaffb6030000000000008500000083000000bf090000000000145509010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000f10000850000008600000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000002c0)) mmap$usbfs(&(0x7f0000226000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0x1) 387.638293ms ago: executing program 9 (id=1178): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)=',-\x10*\xc8+\x14\xc6@\xcf\xb1;\xb5\xee;\x00\xee7\x9f\x9b\x17\x8dv\xed\x96M\xc1\x0ezw\xea\xccgl{\xa9I\xe6\xe6G\x8e2\xb6\xc2\"$0=\x89\xe6\tt\xaf\xea\xfc_<(]\xf6kFNE}\xd6\x13\xc8idz\xff\xff\x00\x00\x89y\xc1b\x9d\x818\xaa0D\xaf\xa1\x82\xa5.\xa3\"\xe5\x19{!\xc6\xa5\xb4\xddw3\t\x00\x00\xd0\x9b\x81`{R9A$z\x90\x90\x80\x8euj\xb4P\x96\x9b\x1f\xc5^\xc0\xf3\xa5\xd1\xf2\x02\xa5Z^c\xef2E\x1f\xf3 \xcc\xd0P3\x12\xe0\xefv\xaf\xe1.\xea\xebgF\xa5\x92|\x9b\xba\xc4\x1c\x8a\xf6\v\x94\n\xb9\x7f3YR\xc3wMd\xd2\xdf\xd2\xbb\xff\xe3\xb6\xd8\xd0r\xc0\xca\xc7\xfa\x0efX\x85\xcde\xc7\x88L\x1c\x9bw\x15!!\xb8\x06l\xb9\xf7\x82%sb\xc0\x89m\x16\b4\x87\x8a\xb0\x02\xd8\xc5\xbc\xc3\x9c\xabF\xd1x\xc4\xc2b\x1b\xb1\xbc\xb5*\xd7\x19\xe2\xc6\x04\xfa\xf0Hbk\xc7\xce\xbdQ\x06\x84\x04Dc\x81\x02\'\x95\xe9\xb2*s\xf9\xe0\x14\x88\xea\x85\x01\xed\v\x05\xe1P\xef\xf3^\x10s\xa3\xce\xd2/\xd3>w\x8d\x11\x00\xb2\xff\x88\xa9\xe7\x8c\xf0\xcf\xd6u\xff\xc1%N\xe7\xc3T\x19\x93\xd0\b\xd3K\xb1\r\xd0DXN\x98\x01\x88\xcc\xdc\xf2\x12\xaf\xa0o?wg\xb0\xf4-p\xa9-\v\t\x04\x15\xf6\xecOp\xfd`\x1bu}1x\x99\x88\xaaA\xb9 \xbeB3^\xa1\x9e\xa2\x1cz\x8a\xe4\xf9\xa0\xd9\xc5\xben;\x1aLGZ\xf4\xdapbH.\xc4\x12\xf0\x94\x943\xe8r\x89\x8cy\x02d\xe5B\x16\xe3\xb8dnP]\xc2\xfe\xd6D\x92\x1df\xe7\xdb\x9e(\x7f\a\xac\x19X\xd7GK\xb8M\x1c#\x94\xc7&\xda\xc2\xb1\xf3\x1a\xecI}1M\x9b\x9f\xcb\xa3v\x9f\x89\xd2Q\x8b\"\x8d\x98E\xa5\x8bT\xfb\"\xa8\xe5X\xac\xd2\xd3k\xefd;>\xf9\xb1O\x13L#\xe0\x01\x9a\x90\xd9\xc6\x8d\xcb!\xbeZ\x8b\x90\b\xf5\xc2\nA\x06\xd8O\xa7}E\xb47\xb9@\xcc\x8c\x06\xfe\x81EH\x84\xb6\xbe\x19\xa3\xbao!', &(0x7f0000000a40)='$\x00-<\x00-\xc7\xf2\xd74!\xdc\x97{%-\x9c\x1eY\xd2\x9a\x86\xa6\xa6\xf8Og\x1d\xff\x1f\x86\xeb\x9f\xad-\xa5\xf5 \'\xa8W\xef\xc6=\xfc\xa7\xb0$Hs\xcf!\xe9\'t\b\x14\xa2\xc9\xc6\xb4}\xea\x05\xc5\xba}W\x1b3\xdcE\x90\x85\x1d\x1a`\xb9\x06\xd2tRy\xdd\x8c\x9a\f\x11[\x86 \xa34g\x1f\xfap\x84.\x81\xd1\xced\xc9$\xeb\xe4\xd9}\x84\x8d\x18\xd0\xc6|3\xbd\x92u_\xbel\v\xd6\xb5\xd4E\xcf\xce\x93\xe5e\xecn\x0eEz\xb0@\x8d_m/\x1a\xec\xbc\xe0\xb2\x8eW\x14\xca\xf1\t\xda\xba\xec\x19\x0fTc\xd0\xf7\xdc\xf02\x04`\x18M\xfc\r\xaa\xef\xc7', 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket(0x2d, 0x2, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000010c0)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x5, 0x2, 0x29}, 0x2c) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4) pipe2$9p(&(0x7f0000000040), 0x80) syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffffe, 0x302) 177.505157ms ago: executing program 2 (id=1179): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x0, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r10}, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240029c900"/20, @ANYRES16=r9, @ANYBLOB="01002dbd7000ffdbdf2518000000080030800400018008000300", @ANYRES32=r11, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x40084) 118.896388ms ago: executing program 9 (id=1180): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x15) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@nodiscard}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f00000009c0)="3bf58d", 0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7fffeffd) 0s ago: executing program 2 (id=1181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) creat(&(0x7f00000000c0)='./bus\x00', 0x182) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000640)) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/69, 0x21) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="6cd0cf3b00010000c2510000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): d0: entered promiscuous mode [ 141.491403][ T6539] team0: entered promiscuous mode [ 141.508447][ T6539] nlmon0: entered promiscuous mode [ 141.530919][ T6539] caif0: entered promiscuous mode [ 141.539667][ T6539] veth0: entered promiscuous mode [ 141.554976][ T6539] veth1: entered promiscuous mode [ 141.574258][ T6539] wg1: entered promiscuous mode [ 141.582794][ T6539] wg2: entered promiscuous mode [ 141.592373][ T6539] veth0_to_bridge: entered promiscuous mode [ 141.601604][ T6539] bridge_slave_0: entered promiscuous mode [ 141.609373][ T6539] veth1_to_bridge: entered promiscuous mode [ 141.617916][ T6539] bridge_slave_1: entered promiscuous mode [ 141.626567][ T6539] veth0_to_bond: entered promiscuous mode [ 141.635211][ T6539] bond_slave_0: entered promiscuous mode [ 141.643269][ T6539] veth1_to_bond: entered promiscuous mode [ 141.654406][ T6539] bond_slave_1: entered promiscuous mode [ 141.662115][ T6539] veth0_to_team: entered promiscuous mode [ 141.671515][ T6539] team_slave_0: entered promiscuous mode [ 141.678913][ T6539] veth1_to_team: entered promiscuous mode [ 141.686288][ T6539] team_slave_1: entered promiscuous mode [ 141.692296][ T6539] veth0_to_batadv: entered promiscuous mode [ 141.699382][ T6539] batadv_slave_0: entered promiscuous mode [ 141.706706][ T6539] veth1_to_batadv: entered promiscuous mode [ 141.713979][ T6539] batadv_slave_1: entered promiscuous mode [ 141.721360][ T6539] xfrm0: entered promiscuous mode [ 141.727579][ T6539] veth0_to_hsr: entered promiscuous mode [ 141.737381][ T6539] veth1_to_hsr: entered promiscuous mode [ 141.746898][ T6539] hsr0: entered promiscuous mode [ 141.754441][ T6539] veth1_virt_wifi: entered promiscuous mode [ 141.762061][ T6539] veth0_virt_wifi: entered promiscuous mode [ 141.777068][ T6539] vlan1: entered promiscuous mode [ 141.783926][ T6539] macvlan0: entered promiscuous mode [ 141.790633][ T6539] macvlan1: entered promiscuous mode [ 141.797264][ T6539] ipvlan0: entered promiscuous mode [ 141.802724][ T6539] ipvlan1: entered promiscuous mode [ 141.810723][ T6539] macvtap0: entered promiscuous mode [ 141.817631][ T6539] macsec0: entered promiscuous mode [ 141.825174][ T6539] geneve0: entered promiscuous mode [ 141.831938][ T6539] geneve1: entered promiscuous mode [ 141.838154][ T6539] netdevsim netdevsim5 eth0: entered promiscuous mode [ 141.845701][ T6539] netdevsim netdevsim5 eth1: entered promiscuous mode [ 141.854103][ T6539] netdevsim netdevsim5 eth2: entered promiscuous mode [ 141.861850][ T6539] netdevsim netdevsim5 eth3: entered promiscuous mode [ 141.870129][ T6539] bond1: entered promiscuous mode [ 141.876384][ T6539] bond2: entered promiscuous mode [ 141.882565][ T6539] sit1: entered promiscuous mode [ 141.889009][ T6539] bridge1: entered promiscuous mode [ 141.895609][ T12] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.905821][ T12] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.915354][ T12] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.927514][ T2799] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.927800][ T3972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.947330][ T6559] loop8: detected capacity change from 0 to 512 [ 142.001371][ T6559] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 142.021442][ T6559] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.718: corrupted in-inode xattr: overlapping e_value [ 142.036769][ T6559] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.718: couldn't read orphan inode 15 (err -117) [ 142.053763][ T6559] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.113624][ T6568] loop0: detected capacity change from 0 to 128 [ 142.122679][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 142.122696][ T29] audit: type=1326 audit(1756822467.584:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d93aebe9 code=0x7ffc0000 [ 142.153802][ T29] audit: type=1326 audit(1756822467.584:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d93aebe9 code=0x7ffc0000 [ 142.231293][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.707'. [ 142.699427][ T29] audit: type=1326 audit(1756822467.734:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20d93aebe9 code=0x7ffc0000 [ 142.723719][ T29] audit: type=1326 audit(1756822467.734:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d93aebe9 code=0x7ffc0000 [ 142.751751][ T29] audit: type=1326 audit(1756822467.734:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d93aebe9 code=0x7ffc0000 [ 142.778408][ T29] audit: type=1326 audit(1756822467.734:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20d93aebe9 code=0x7ffc0000 [ 142.804358][ T29] audit: type=1326 audit(1756822467.734:4256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d93aebe9 code=0x7ffc0000 [ 142.828518][ T29] audit: type=1326 audit(1756822467.734:4257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d93aebe9 code=0x7ffc0000 [ 142.852249][ T29] audit: type=1326 audit(1756822467.734:4258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20d93aebe9 code=0x7ffc0000 [ 142.877410][ T29] audit: type=1326 audit(1756822467.734:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.7.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d93aebe9 code=0x7ffc0000 [ 142.978815][ T6584] loop5: detected capacity change from 0 to 128 [ 142.994580][ T4879] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.012780][ T6586] Falling back ldisc for ptm0. [ 143.052468][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'. [ 143.055172][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.8.724'. [ 143.094526][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.714'. [ 143.212900][ T6590] loop0: detected capacity change from 0 to 512 [ 143.237056][ T6590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.369088][ T6590] ext4 filesystem being mounted at /166/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.390812][ T6590] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.714: corrupted inode contents [ 143.405759][ T6590] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #4: comm syz.0.714: mark_inode_dirty error [ 143.418318][ T6590] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.714: corrupted inode contents [ 143.432554][ T6590] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.714: mark_inode_dirty error [ 143.446823][ T6590] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.714: Failed to acquire dquot type 1 [ 143.947955][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.966685][ T6609] program syz.7.721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.526954][ T6628] lo speed is unknown, defaulting to 1000 [ 144.534997][ T6628] lo speed is unknown, defaulting to 1000 [ 144.739523][ T6627] sctp: [Deprecated]: syz.2.725 (pid 6627) Use of int in maxseg socket option. [ 144.739523][ T6627] Use struct sctp_assoc_value instead [ 144.985028][ T6632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.720'. [ 144.996557][ T6632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.720'. [ 145.685188][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 145.742904][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 146.010917][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.728'. [ 146.446263][ T6656] 9pnet_fd: Insufficient options for proto=fd [ 146.498073][ T6658] tipc: Started in network mode [ 146.503319][ T6658] tipc: Node identity ac14140f, cluster identity 4711 [ 146.510984][ T6658] tipc: New replicast peer: 255.255.255.255 [ 146.517254][ T6658] tipc: Enabled bearer , priority 10 [ 146.645433][ T6664] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 146.645433][ T6664] program syz.5.736 not setting count and/or reply_len properly [ 146.753924][ T6671] netlink: 40 bytes leftover after parsing attributes in process `syz.8.735'. [ 147.219559][ T6681] loop5: detected capacity change from 0 to 736 [ 147.242773][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 147.242793][ T29] audit: type=1326 audit(1756822472.694:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.8.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f8e0ebe9 code=0x7ffc0000 [ 147.289171][ T6681] Symlink component flag not implemented [ 147.311666][ T29] audit: type=1326 audit(1756822472.734:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.8.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd4f8e0ebe9 code=0x7ffc0000 [ 147.338309][ T29] audit: type=1326 audit(1756822472.734:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f8e0ebe9 code=0x7ffc0000 [ 147.366256][ T29] audit: type=1326 audit(1756822472.734:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f8e0ebe9 code=0x7ffc0000 [ 147.393994][ T29] audit: type=1326 audit(1756822472.734:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4f8e0ebe9 code=0x7ffc0000 [ 147.420349][ T29] audit: type=1326 audit(1756822472.734:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f8e0ebe9 code=0x7ffc0000 [ 147.444826][ T29] audit: type=1326 audit(1756822472.734:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f8e0ebe9 code=0x7ffc0000 [ 147.469235][ T29] audit: type=1326 audit(1756822472.764:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4f8e0ebe9 code=0x7ffc0000 [ 147.496023][ T29] audit: type=1326 audit(1756822472.764:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f8e0ebe9 code=0x7ffc0000 [ 147.519565][ T29] audit: type=1326 audit(1756822472.764:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f8e0ebe9 code=0x7ffc0000 [ 147.543156][ T6329] tipc: Node number set to 2886997007 [ 147.760213][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 147.933996][ T6701] netlink: 460 bytes leftover after parsing attributes in process `syz.7.747'. [ 148.419728][ T6701] netlink: 100 bytes leftover after parsing attributes in process `syz.7.747'. [ 148.442390][ T6711] SELinux: security_context_str_to_sid () failed with errno=-22 [ 148.527244][ T6714] loop8: detected capacity change from 0 to 512 [ 148.606899][ T6718] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 148.608361][ T6714] EXT4-fs (loop8): orphan cleanup on readonly fs [ 148.613786][ T6718] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 148.613887][ T6718] vhci_hcd vhci_hcd.0: Device attached [ 148.655027][ T6718] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 148.661985][ T6718] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.669676][ T6718] vhci_hcd vhci_hcd.0: Device attached [ 148.678212][ T6714] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.748: bad orphan inode 13 [ 148.700055][ T6714] ext4_test_bit(bit=12, block=18) = 1 [ 148.705562][ T6714] is_bad_inode(inode)=0 [ 148.709730][ T6714] NEXT_ORPHAN(inode)=2130706432 [ 148.714662][ T6714] max_ino=32 [ 148.717874][ T6714] i_nlink=1 [ 148.732077][ T6718] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 148.751900][ T6727] sd 0:0:1:0: device reset [ 148.762195][ T6718] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 148.769044][ T6718] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 148.776929][ T6718] vhci_hcd vhci_hcd.0: Device attached [ 148.789887][ T6302] vhci_hcd: vhci_device speed not set [ 148.798003][ T6714] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.839955][ T6718] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(17) [ 148.846603][ T6718] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 148.854359][ T6718] vhci_hcd vhci_hcd.0: Device attached [ 148.859938][ T6302] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 148.892914][ T6718] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(19) [ 148.899685][ T6718] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 148.907604][ T6718] vhci_hcd vhci_hcd.0: Device attached [ 148.920937][ T6736] netlink: 'syz.2.753': attribute type 10 has an invalid length. [ 148.928905][ T6736] dummy0: left promiscuous mode [ 148.934004][ T6736] batman_adv: batadv0: Removing interface: dummy0 [ 148.941224][ T6740] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 148.954221][ T6736] dummy0: entered promiscuous mode [ 148.962550][ T6736] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 148.969607][ T6723] vhci_hcd: connection closed [ 148.971414][ T6719] vhci_hcd: connection reset by peer [ 148.972111][ T6732] vhci_hcd: connection closed [ 148.976644][ T6735] vhci_hcd: connection closed [ 148.981811][ T297] vhci_hcd: stop threads [ 148.995351][ T297] vhci_hcd: release socket [ 149.000449][ T297] vhci_hcd: disconnect device [ 149.005341][ T6730] vhci_hcd: connection closed [ 149.015535][ T297] vhci_hcd: stop threads [ 149.024656][ T297] vhci_hcd: release socket [ 149.029120][ T297] vhci_hcd: disconnect device [ 149.035478][ T4879] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.052572][ T297] vhci_hcd: stop threads [ 149.057295][ T297] vhci_hcd: release socket [ 149.062058][ T297] vhci_hcd: disconnect device [ 149.069981][ T297] vhci_hcd: stop threads [ 149.074794][ T297] vhci_hcd: release socket [ 149.079429][ T297] vhci_hcd: disconnect device [ 149.087836][ T6739] loop5: detected capacity change from 0 to 4096 [ 149.094431][ T6742] loop8: detected capacity change from 0 to 1024 [ 149.094608][ T297] vhci_hcd: stop threads [ 149.105122][ T297] vhci_hcd: release socket [ 149.109570][ T297] vhci_hcd: disconnect device [ 149.114747][ T6742] EXT4-fs: Ignoring removed orlov option [ 149.133796][ T6739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.147363][ T6742] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.172044][ T6744] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.755'. [ 149.236596][ T3972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.299294][ T6754] loop5: detected capacity change from 0 to 512 [ 149.310942][ T6754] msdos: Unknown parameter 'nocese' [ 149.449196][ T4879] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.553584][ T6764] netlink: 'syz.8.761': attribute type 4 has an invalid length. [ 149.785436][ T6773] lo speed is unknown, defaulting to 1000 [ 149.796921][ T6773] lo speed is unknown, defaulting to 1000 [ 149.905600][ T6779] loop8: detected capacity change from 0 to 8192 [ 149.920070][ T6779] msdos: Unknown parameter 'A' [ 149.953108][ T6787] loop5: detected capacity change from 0 to 512 [ 149.977330][ T6787] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 149.990545][ T6787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 150.005284][ T6787] System zones: 1-12 [ 150.020567][ T6787] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.769: corrupted in-inode xattr: e_value size too large [ 150.038070][ T6787] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.769: couldn't read orphan inode 15 (err -117) [ 150.060354][ T6787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.074147][ T6792] loop8: detected capacity change from 0 to 512 [ 150.087738][ T6787] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.769: corrupted in-inode xattr: e_value size too large [ 150.094873][ T6792] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.116084][ T6792] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 150.129570][ T6794] netlink: 16 bytes leftover after parsing attributes in process `syz.7.771'. [ 150.141025][ T6792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 150.160704][ T6792] System zones: 1-12 [ 150.165522][ T6792] EXT4-fs (loop8): 1 truncate cleaned up [ 150.174615][ T6794] loop9: detected capacity change from 0 to 7 [ 150.187673][ T6792] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.222577][ T6792] lo speed is unknown, defaulting to 1000 [ 150.229376][ T6792] lo speed is unknown, defaulting to 1000 [ 150.405273][ T6792] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.503988][ T6808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.773'. [ 150.662000][ T6787] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.952359][ T4879] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /86/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 150.991256][ T4879] EXT4-fs error (device loop8): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 151.013290][ T4879] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /86/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 151.040308][ T4879] EXT4-fs error (device loop8): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 151.061641][ T4879] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /86/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 151.083848][ T4879] EXT4-fs error (device loop8): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 151.104773][ T4879] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /86/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 151.127530][ T4879] EXT4-fs error (device loop8): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 151.160028][ T4879] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /86/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 151.204657][ T4879] EXT4-fs error (device loop8): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 151.324689][ T3958] IPVS: starting estimator thread 0... [ 151.429936][ T6827] IPVS: using max 1968 ests per chain, 98400 per kthread [ 151.450689][ T6829] loop5: detected capacity change from 0 to 512 [ 151.486410][ T6829] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 151.518897][ T6829] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 151.574158][ T6829] EXT4-fs (loop5): 1 truncate cleaned up [ 151.582106][ T6829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.619444][ T3972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.853951][ T6801] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.905380][ T6842] lo speed is unknown, defaulting to 1000 [ 151.912144][ T6842] lo speed is unknown, defaulting to 1000 [ 152.187489][ T6846] __nla_validate_parse: 1 callbacks suppressed [ 152.187512][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.5.785'. [ 152.203536][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.5.785'. [ 152.327314][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 152.327332][ T29] audit: type=1400 audit(1756822477.784:4668): avc: denied { mounton } for pid=6848 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 152.393729][ T29] audit: type=1400 audit(1756822477.854:4669): avc: denied { bind } for pid=6855 comm="syz.5.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.415912][ T29] audit: type=1400 audit(1756822477.874:4670): avc: denied { ioctl } for pid=6855 comm="syz.5.790" path="socket:[17887]" dev="sockfs" ino=17887 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.423881][ T6848] lo speed is unknown, defaulting to 1000 [ 152.452768][ T6848] lo speed is unknown, defaulting to 1000 [ 152.467843][ T29] audit: type=1400 audit(1756822477.924:4671): avc: denied { write } for pid=6855 comm="syz.5.790" path="socket:[17887]" dev="sockfs" ino=17887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.557820][ T6848] chnl_net:caif_netlink_parms(): no params data found [ 152.603980][ T6869] lo speed is unknown, defaulting to 1000 [ 152.610043][ T6869] lo speed is unknown, defaulting to 1000 [ 152.619369][ T6869] lo speed is unknown, defaulting to 1000 [ 152.627431][ T6869] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 152.651685][ T6869] lo speed is unknown, defaulting to 1000 [ 152.653748][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.660335][ T6875] netlink: 'syz.5.801': attribute type 10 has an invalid length. [ 152.664700][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.680899][ T6848] bridge_slave_0: entered allmulticast mode [ 152.687817][ T6848] bridge_slave_0: entered promiscuous mode [ 152.695462][ T6869] lo speed is unknown, defaulting to 1000 [ 152.702037][ T6875] lo: left promiscuous mode [ 152.706943][ T6875] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 152.719203][ T6869] lo speed is unknown, defaulting to 1000 [ 152.725491][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.725588][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.725747][ T6848] bridge_slave_1: entered allmulticast mode [ 152.726296][ T6848] bridge_slave_1: entered promiscuous mode [ 152.829049][ T6869] lo speed is unknown, defaulting to 1000 [ 152.843696][ T6869] lo speed is unknown, defaulting to 1000 [ 152.852068][ T6848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.864261][ T6869] lo speed is unknown, defaulting to 1000 [ 152.872326][ T6848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.881837][ T6869] lo speed is unknown, defaulting to 1000 [ 152.889977][ T6869] lo speed is unknown, defaulting to 1000 [ 152.906753][ T6848] team0: Port device team_slave_0 added [ 152.914066][ T6848] team0: Port device team_slave_1 added [ 153.066399][ T6887] lo speed is unknown, defaulting to 1000 [ 153.073787][ T6887] lo speed is unknown, defaulting to 1000 [ 153.142669][ T6887] lo speed is unknown, defaulting to 1000 [ 153.301352][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.308467][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.335142][ T6848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.349686][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.356856][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.383004][ T6848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.441609][ T6848] hsr_slave_0: entered promiscuous mode [ 153.448394][ T6848] hsr_slave_1: entered promiscuous mode [ 153.461846][ T6848] debugfs: 'hsr0' already exists in 'hsr' [ 153.464828][ T6896] loop5: detected capacity change from 0 to 1024 [ 153.467803][ T6848] Cannot create hsr debugfs directory [ 153.493610][ T6896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.531415][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 153.608232][ T6903] netlink: 'syz.2.799': attribute type 10 has an invalid length. [ 153.635664][ T6903] bond0: (slave dummy0): Releasing backup interface [ 153.641828][ T6904] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.798: Allocating blocks 449-513 which overlap fs metadata [ 153.664933][ T6907] netlink: 'syz.2.799': attribute type 10 has an invalid length. [ 153.666832][ T6903] dummy0: left promiscuous mode [ 153.691049][ T29] audit: type=1400 audit(1756822479.154:4672): avc: denied { connect } for pid=6905 comm="syz.7.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.714644][ T6903] dummy0: entered promiscuous mode [ 153.721816][ T6903] team0: Port device dummy0 added [ 153.739575][ T6907] dummy0: left promiscuous mode [ 153.745643][ T6907] team0: Port device dummy0 removed [ 153.753208][ T6907] dummy0: entered promiscuous mode [ 153.758568][ T6907] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 153.787072][ T6906] lo speed is unknown, defaulting to 1000 [ 153.796223][ T6848] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 153.807991][ T6848] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 153.817168][ T6906] lo speed is unknown, defaulting to 1000 [ 153.823256][ T6848] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 153.833334][ T6848] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 153.860233][ T6906] lo speed is unknown, defaulting to 1000 [ 153.903368][ T29] audit: type=1400 audit(1756822479.364:4673): avc: denied { relabelto } for pid=6910 comm="syz.2.802" name="" dev="pipefs" ino=18226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcpd_exec_t:s0" [ 153.940555][ T6302] usb 1-1: enqueue for inactive port 0 [ 153.948792][ T6848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.967324][ T6302] usb 1-1: enqueue for inactive port 0 [ 153.982830][ T6848] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.010139][ T3423] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.017351][ T3423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.040355][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.044412][ T6924] siw: device registration error -23 [ 154.047475][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.062816][ T6302] vhci_hcd: vhci_device speed not set [ 154.086289][ T6848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.185835][ T6848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.232333][ T6941] loop0: detected capacity change from 0 to 512 [ 154.260190][ T6941] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.291489][ T6895] EXT4-fs (loop5): pa ffff8881058807e0: logic 48, phys. 177, len 21 [ 154.299635][ T6895] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 154.326400][ T6941] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 154.374554][ T3972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.379571][ T6949] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 154.393466][ T6941] EXT4-fs (loop0): 1 truncate cleaned up [ 154.407671][ T6941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.446601][ T6954] lo speed is unknown, defaulting to 1000 [ 154.461951][ T6954] lo speed is unknown, defaulting to 1000 [ 154.538943][ T29] audit: type=1400 audit(1756822479.994:4674): avc: denied { create } for pid=6952 comm="syz.5.808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=mctp_socket permissive=1 [ 154.541610][ T6848] veth0_vlan: entered promiscuous mode [ 154.572357][ T6848] veth1_vlan: entered promiscuous mode [ 154.579314][ T29] audit: type=1400 audit(1756822480.034:4675): avc: denied { create } for pid=6952 comm="syz.5.808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 154.657915][ T29] audit: type=1400 audit(1756822480.114:4676): avc: denied { create } for pid=6952 comm="syz.5.808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 154.679328][ T29] audit: type=1400 audit(1756822480.114:4677): avc: denied { write } for pid=6952 comm="syz.5.808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 154.705895][ T6848] veth0_macvtap: entered promiscuous mode [ 154.719227][ T6954] lo speed is unknown, defaulting to 1000 [ 154.726148][ T6848] veth1_macvtap: entered promiscuous mode [ 154.787879][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.800782][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.816777][ T3423] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.842887][ T3423] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.860198][ T3423] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.899263][ T3423] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.997918][ T6969] macsec1: entered promiscuous mode [ 155.027778][ T6969] bridge0: port 1(macsec1) entered blocking state [ 155.034423][ T6969] bridge0: port 1(macsec1) entered disabled state [ 155.061606][ T6969] macsec1: entered allmulticast mode [ 155.067009][ T6969] bridge0: entered allmulticast mode [ 155.086418][ T6978] netlink: 'syz.7.812': attribute type 27 has an invalid length. [ 155.096181][ T6969] macsec1: left allmulticast mode [ 155.101280][ T6969] bridge0: left allmulticast mode [ 155.142397][ T6978] bridge1: left promiscuous mode [ 155.147513][ T6978] bridge1: left allmulticast mode [ 155.153949][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.7.812'. [ 155.283325][ T6981] vlan0: entered promiscuous mode [ 155.288527][ T6981] hsr_slave_1: entered promiscuous mode [ 155.294590][ T6981] vlan0: entered allmulticast mode [ 155.301926][ T6981] hsr_slave_1: entered allmulticast mode [ 155.350438][ T6986] wireguard0: entered promiscuous mode [ 155.356037][ T6986] wireguard0: entered allmulticast mode [ 155.397689][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.7.813'. [ 155.406283][ T6992] netlink: 'syz.5.816': attribute type 10 has an invalid length. [ 155.418351][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.441587][ T6992] netlink: 196 bytes leftover after parsing attributes in process `syz.5.816'. [ 155.451532][ T6992] netlink: 'syz.5.816': attribute type 10 has an invalid length. [ 155.462573][ T6992] siw: device registration error -23 [ 155.559535][ T6302] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 155.567361][ T6302] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 155.575028][ T6302] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 155.585419][ T6302] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 155.593069][ T6302] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 155.600758][ T6302] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 155.608692][ T6302] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 155.616986][ T6302] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 155.624610][ T6302] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 155.632502][ T6302] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 155.693301][ T7009] autofs4:pid:7009:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(43008.1), cmd(0xc0189374) [ 155.707757][ T7009] autofs4:pid:7009:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 155.771802][ T6302] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 155.896125][ T7016] lo speed is unknown, defaulting to 1000 [ 155.902997][ T7016] lo speed is unknown, defaulting to 1000 [ 155.964431][ T7016] lo speed is unknown, defaulting to 1000 [ 156.267748][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.7.820'. [ 156.356547][ T7013] fido_id[7013]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 156.763396][ T7025] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 156.775229][ T6329] usb usb2-port1: attempt power cycle [ 156.880294][ T7025] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.887611][ T7025] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.090289][ T7033] netlink: 'syz.0.824': attribute type 27 has an invalid length. [ 157.132698][ T7033] lo: left promiscuous mode [ 157.137439][ T7033] tunl0: left promiscuous mode [ 157.142346][ T7033] gre0: left promiscuous mode [ 157.147156][ T7033] gretap0: left promiscuous mode [ 157.152350][ T7033] erspan0: left promiscuous mode [ 157.157357][ T7033] ip_vti0: left promiscuous mode [ 157.162460][ T7033] ip6_vti0: left promiscuous mode [ 157.167616][ T7033] sit0: left promiscuous mode [ 157.173013][ T7033] ip6tnl0: left promiscuous mode [ 157.178374][ T7033] ip6gre0: left promiscuous mode [ 157.183709][ T7033] syz_tun: left promiscuous mode [ 157.188810][ T7033] ip6gretap0: left promiscuous mode [ 157.194357][ T7033] vcan0: left promiscuous mode [ 157.199492][ T7033] $Hÿ: left promiscuous mode [ 157.204790][ T7033] team0: left promiscuous mode [ 157.422206][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 157.453440][ T7033] dummy0: left promiscuous mode [ 157.458418][ T7033] nlmon0: left promiscuous mode [ 157.463625][ T7033] caif0: left promiscuous mode [ 157.468506][ T7033] veth0: left promiscuous mode [ 157.473447][ T7033] veth1: left promiscuous mode [ 157.478489][ T7033] wg0: left promiscuous mode [ 157.483287][ T7033] wg1: left promiscuous mode [ 157.488039][ T7033] wg2: left promiscuous mode [ 157.492795][ T7033] veth0_to_bridge: left promiscuous mode [ 157.498479][ T7033] bridge_slave_0: left promiscuous mode [ 157.504200][ T7033] veth1_to_bridge: left promiscuous mode [ 157.510857][ T7033] bridge_slave_1: left promiscuous mode [ 157.516474][ T7033] veth0_to_bond: left promiscuous mode [ 157.522187][ T7033] bond_slave_0: left promiscuous mode [ 157.527756][ T7033] veth1_to_bond: left promiscuous mode [ 157.533627][ T7033] bond_slave_1: left promiscuous mode [ 157.539264][ T7033] veth0_to_team: left promiscuous mode [ 157.544939][ T7033] team_slave_0: left promiscuous mode [ 157.550602][ T7033] veth1_to_team: left promiscuous mode [ 157.556248][ T7033] team_slave_1: left promiscuous mode [ 157.561912][ T7033] veth0_to_batadv: left promiscuous mode [ 157.567730][ T7033] batadv_slave_0: left promiscuous mode [ 157.573498][ T7033] veth1_to_batadv: left promiscuous mode [ 157.579251][ T7033] batadv_slave_1: left promiscuous mode [ 157.584929][ T7033] xfrm0: left promiscuous mode [ 157.589870][ T7033] veth0_to_hsr: left promiscuous mode [ 157.595386][ T7033] hsr_slave_0: left promiscuous mode [ 157.600881][ T7033] veth1_to_hsr: left promiscuous mode [ 157.606324][ T7033] hsr_slave_1: left promiscuous mode [ 157.611899][ T7033] veth1_virt_wifi: left promiscuous mode [ 157.617722][ T7033] veth0_virt_wifi: left promiscuous mode [ 157.623727][ T7033] macvtap0: left promiscuous mode [ 157.629292][ T7033] macsec0: left promiscuous mode [ 157.636165][ T7033] geneve0: left promiscuous mode [ 157.641523][ T7033] geneve1: left promiscuous mode [ 157.653518][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 157.653535][ T29] audit: type=1326 audit(1756822483.104:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.2.833" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f805421ebe9 code=0x0 [ 157.659156][ T7033] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 157.699648][ T7033] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 157.707462][ T7033] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 157.716400][ T7033] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 157.723836][ T7033] gre1: left promiscuous mode [ 157.728735][ T7033] pim6reg: left promiscuous mode [ 157.733923][ T7033] bridge0: left promiscuous mode [ 157.743533][ T7038] lo: entered allmulticast mode [ 157.803862][ T7043] lo: left allmulticast mode [ 157.810117][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.9.827'. [ 157.836022][ T29] audit: type=1326 audit(1756822483.284:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 157.861096][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 157.872403][ T29] audit: type=1326 audit(1756822483.314:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 157.896250][ T29] audit: type=1326 audit(1756822483.314:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 157.919623][ T29] audit: type=1326 audit(1756822483.314:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 157.943291][ T29] audit: type=1326 audit(1756822483.314:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 157.966767][ T29] audit: type=1326 audit(1756822483.314:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 157.990278][ T29] audit: type=1326 audit(1756822483.314:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 158.013818][ T29] audit: type=1326 audit(1756822483.314:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 158.037289][ T29] audit: type=1326 audit(1756822483.324:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.2.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 158.159139][ T7063] loop5: detected capacity change from 0 to 512 [ 158.166274][ T7063] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.201368][ T7065] $Hÿ: (slave team0): Releasing backup interface [ 158.209298][ T7065] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 158.214600][ T7063] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 158.230156][ T7065] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 158.239346][ T7065] team0: Port device team_slave_0 removed [ 158.246970][ T7065] team0: Port device team_slave_1 removed [ 158.255240][ T7065] team0: Port device netdevsim1 removed [ 158.467394][ T7075] loop5: detected capacity change from 0 to 512 [ 158.502872][ T7075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.516606][ T7075] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.696524][ T7081] loop0: detected capacity change from 0 to 128 [ 158.808089][ T7091] netlink: 'syz.2.855': attribute type 27 has an invalid length. [ 158.816033][ T7091] lo: left promiscuous mode [ 158.820902][ T7091] tunl0: left promiscuous mode [ 158.825842][ T7091] gre0: left promiscuous mode [ 158.830720][ T7091] gretap0: left promiscuous mode [ 158.835842][ T7091] erspan0: left promiscuous mode [ 158.840926][ T7091] ip_vti0: left promiscuous mode [ 158.846038][ T7091] ip6_vti0: left promiscuous mode [ 158.851521][ T7091] sit0: left promiscuous mode [ 158.856548][ T7091] ip6tnl0: left promiscuous mode [ 158.861844][ T7091] ip6gre0: left promiscuous mode [ 158.866949][ T7091] bridge0: left promiscuous mode [ 158.872032][ T7091] vcan0: left promiscuous mode [ 158.876914][ T7091] bond0: left promiscuous mode [ 158.905598][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 158.921710][ T6329] usb usb2-port1: unable to enumerate USB device [ 158.923879][ T7091] dummy0: left promiscuous mode [ 158.934067][ T7091] team0: left promiscuous mode [ 158.952413][ T7091] nlmon0: left promiscuous mode [ 158.957488][ T7091] caif0: left promiscuous mode [ 158.962697][ T7091] batadv0: left promiscuous mode [ 158.968010][ T7091] vxcan0: left promiscuous mode [ 158.972945][ T7091] vxcan1: left promiscuous mode [ 158.977932][ T7091] veth0: left promiscuous mode [ 158.982936][ T7091] veth1: left promiscuous mode [ 158.987904][ T7091] wg0: left promiscuous mode [ 158.992735][ T7091] wg1: left promiscuous mode [ 158.997405][ T7091] wg2: left promiscuous mode [ 159.002086][ T7091] veth0_to_bridge: left promiscuous mode [ 159.008025][ T7091] veth1_to_bridge: left promiscuous mode [ 159.013933][ T7091] veth0_to_bond: left promiscuous mode [ 159.019503][ T7091] bond_slave_0: left promiscuous mode [ 159.024991][ T7091] veth1_to_bond: left promiscuous mode [ 159.030573][ T7091] bond_slave_1: left promiscuous mode [ 159.036101][ T7091] veth0_to_team: left promiscuous mode [ 159.041846][ T7091] team_slave_0: left promiscuous mode [ 159.047348][ T7091] veth1_to_team: left promiscuous mode [ 159.053042][ T7091] team_slave_1: left promiscuous mode [ 159.058786][ T7091] veth0_to_batadv: left promiscuous mode [ 159.065167][ T7091] batadv_slave_0: left promiscuous mode [ 159.070886][ T7091] veth1_to_batadv: left promiscuous mode [ 159.074720][ T7096] net_ratelimit: 10 callbacks suppressed [ 159.074740][ T7096] Set syz1 is full, maxelem 65536 reached [ 159.076677][ T7091] batadv_slave_1: left promiscuous mode [ 159.093806][ T7091] xfrm0: left promiscuous mode [ 159.098722][ T7091] veth0_to_hsr: left promiscuous mode [ 159.104238][ T7091] hsr_slave_0: left promiscuous mode [ 159.109653][ T7091] veth1_virt_wifi: left promiscuous mode [ 159.115419][ T7091] veth0_virt_wifi: left promiscuous mode [ 159.121263][ T7091] geneve0: left promiscuous mode [ 159.126412][ T7091] geneve1: left promiscuous mode [ 159.131590][ T7091] bridge1: left promiscuous mode [ 159.136701][ T7091] ieee802154 phy1 wpan1: left promiscuous mode [ 159.143144][ T7091] syztnl0: left promiscuous mode [ 159.148721][ T7091] netdevsim netdevsim2 eth0: left promiscuous mode [ 159.155813][ T7091] netdevsim netdevsim2 eth1: left promiscuous mode [ 159.157455][ T3972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.162715][ T7091] netdevsim netdevsim2 eth2: left promiscuous mode [ 159.178508][ T7091] netdevsim netdevsim2 eth3: left promiscuous mode [ 159.254854][ T7105] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 159.277811][ T7108] sd 0:0:1:0: device reset [ 159.294667][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 159.619477][ T7134] loop0: detected capacity change from 0 to 128 [ 159.730700][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.7.854'. [ 159.854104][ T7143] netlink: 'syz.5.856': attribute type 10 has an invalid length. [ 159.870067][ T7143] dummy0: left promiscuous mode [ 159.884232][ T7143] dummy0: entered promiscuous mode [ 159.899249][ T7143] team0: Port device dummy0 added [ 159.909173][ T7144] loop5: detected capacity change from 0 to 512 [ 159.925972][ T7144] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.936279][ T7144] EXT4-fs: Ignoring removed i_version option [ 159.947863][ T7144] EXT4-fs (loop5): 1 orphan inode deleted [ 159.955313][ T7144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.978956][ T7143] netlink: 'syz.5.856': attribute type 10 has an invalid length. [ 160.001191][ T7143] dummy0: left promiscuous mode [ 160.009212][ T7143] team0: Port device dummy0 removed [ 160.024286][ T7143] dummy0: entered promiscuous mode [ 160.038790][ T7143] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 160.063217][ T3972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.126108][ T7147] veth0_to_team: entered promiscuous mode [ 160.146470][ T7149] vlan2: entered promiscuous mode [ 160.151910][ T7149] vlan2: entered allmulticast mode [ 160.157295][ T7149] hsr_slave_1: entered allmulticast mode [ 160.214214][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.857'. [ 160.317585][ T7159] netlink: 'syz.5.860': attribute type 27 has an invalid length. [ 160.326332][ T7159] tunl0: left promiscuous mode [ 160.331570][ T7159] gre0: left promiscuous mode [ 160.336449][ T7159] gretap0: left promiscuous mode [ 160.342024][ T7159] erspan0: left promiscuous mode [ 160.347121][ T7159] ip_vti0: left promiscuous mode [ 160.352195][ T7159] ip6_vti0: left promiscuous mode [ 160.357393][ T7159] sit0: left promiscuous mode [ 160.362261][ T7159] ip6tnl0: left promiscuous mode [ 160.367362][ T7159] ip6gre0: left promiscuous mode [ 160.372526][ T7159] ip6gretap0: left promiscuous mode [ 160.378157][ T7159] bridge0: left promiscuous mode [ 160.379486][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.860'. [ 160.383480][ T7159] vcan0: left promiscuous mode [ 160.397800][ T7159] bond0: left promiscuous mode [ 160.402720][ T7159] team0: left promiscuous mode [ 160.409094][ T7159] dummy0: left promiscuous mode [ 160.415071][ T7159] nlmon0: left promiscuous mode [ 160.420586][ T7159] caif0: left promiscuous mode [ 160.425922][ T7159] veth0: left promiscuous mode [ 160.431849][ T7159] veth1: left promiscuous mode [ 160.437367][ T7159] wg1: left promiscuous mode [ 160.443767][ T7159] wg2: left promiscuous mode [ 160.450319][ T7159] veth0_to_bridge: left promiscuous mode [ 160.457731][ T7159] bridge_slave_0: left promiscuous mode [ 160.465072][ T7159] veth1_to_bridge: left promiscuous mode [ 160.472553][ T7159] bridge_slave_1: left promiscuous mode [ 160.482472][ T7159] veth0_to_bond: left promiscuous mode [ 160.490476][ T7159] bond_slave_0: left promiscuous mode [ 160.499115][ T7159] veth1_to_bond: left promiscuous mode [ 160.508543][ T7159] bond_slave_1: left promiscuous mode [ 160.515769][ T7159] veth0_to_team: left promiscuous mode [ 160.521988][ T7159] team_slave_0: left promiscuous mode [ 160.528584][ T7159] veth1_to_team: left promiscuous mode [ 160.537104][ T7159] team_slave_1: left promiscuous mode [ 160.546785][ T7159] veth0_to_batadv: left promiscuous mode [ 160.553787][ T7159] batadv_slave_0: left promiscuous mode [ 160.560783][ T7159] veth1_to_batadv: left promiscuous mode [ 160.567295][ T7159] batadv_slave_1: left promiscuous mode [ 160.573472][ T7159] xfrm0: left promiscuous mode [ 160.580937][ T7159] veth0_to_hsr: left promiscuous mode [ 160.587617][ T7159] hsr0: left promiscuous mode [ 160.594697][ T7159] veth1_virt_wifi: left promiscuous mode [ 160.600993][ T7159] veth0_virt_wifi: left promiscuous mode [ 160.608074][ T7159] vlan0: left promiscuous mode [ 160.614240][ T7159] vlan1: left promiscuous mode [ 160.620550][ T7159] macvlan0: left promiscuous mode [ 160.626566][ T7159] macvlan1: left promiscuous mode [ 160.635264][ T7159] ipvlan0: left promiscuous mode [ 160.641699][ T7159] ipvlan1: left promiscuous mode [ 160.648353][ T7159] macvtap0: left promiscuous mode [ 160.654119][ T7159] macsec0: left promiscuous mode [ 160.660773][ T7159] geneve0: left promiscuous mode [ 160.667987][ T7159] geneve1: left promiscuous mode [ 160.675093][ T7159] netdevsim netdevsim5 eth0: left promiscuous mode [ 160.683901][ T7159] netdevsim netdevsim5 eth1: left promiscuous mode [ 160.692378][ T7159] netdevsim netdevsim5 eth2: left promiscuous mode [ 160.699486][ T7159] netdevsim netdevsim5 eth3: left promiscuous mode [ 160.706876][ T7159] bond1: left promiscuous mode [ 160.712114][ T7159] bond2: left promiscuous mode [ 160.717147][ T7159] sit1: left promiscuous mode [ 160.721990][ T7159] bridge1: left promiscuous mode [ 160.834961][ T7172] tipc: Enabled bearer , priority 0 [ 160.843071][ T7172] tipc: Disabling bearer [ 160.845273][ T7170] 9pnet: p9_errstr2errno: server reported unknown error [ 161.103875][ T7183] netlink: 'syz.7.868': attribute type 10 has an invalid length. [ 161.156344][ T7186] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 161.157622][ T7183] team0: Port device dummy0 added [ 161.162948][ T7186] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 161.163221][ T7186] vhci_hcd vhci_hcd.0: Device attached [ 161.170789][ T7186] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10) [ 161.170822][ T7186] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 161.170852][ T7186] vhci_hcd vhci_hcd.0: Device attached [ 161.202966][ T7187] netlink: 'syz.7.868': attribute type 10 has an invalid length. [ 161.219610][ T7186] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(12) [ 161.226952][ T7186] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 161.229990][ T7196] loop9: detected capacity change from 0 to 512 [ 161.234741][ T7186] vhci_hcd vhci_hcd.0: Device attached [ 161.248897][ T7197] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 161.267057][ T7196] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.871: corrupted in-inode xattr: invalid ea_ino [ 161.280517][ T7186] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 161.290356][ T7187] team0: Port device dummy0 removed [ 161.292903][ T7196] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.871: couldn't read orphan inode 15 (err -117) [ 161.298267][ T7187] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 161.331223][ T7186] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(18) [ 161.339068][ T7186] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.349214][ T7186] vhci_hcd vhci_hcd.0: Device attached [ 161.351870][ T7196] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.392143][ T6332] vhci_hcd: vhci_device speed not set [ 161.413486][ T6848] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.414871][ T7203] loop0: detected capacity change from 0 to 128 [ 161.437054][ T4459] udevd[4459]: incorrect ext4 checksum on /dev/loop0 [ 161.477088][ T4459] udevd[4459]: incorrect ext4 checksum on /dev/loop0 [ 161.478589][ T7205] loop9: detected capacity change from 0 to 128 [ 161.486334][ T6332] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 161.501541][ T7186] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(22) [ 161.508185][ T7186] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 161.515704][ T7186] vhci_hcd vhci_hcd.0: Device attached [ 161.528566][ T4459] udevd[4459]: incorrect ext4 checksum on /dev/loop9 [ 161.546755][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.7.874'. [ 161.550781][ T7192] vhci_hcd: connection closed [ 161.555647][ T7206] vhci_hcd: connection closed [ 161.556433][ T7190] vhci_hcd: connection closed [ 161.560837][ T7200] vhci_hcd: connection closed [ 161.565251][ T3423] vhci_hcd: stop threads [ 161.578842][ T3423] vhci_hcd: release socket [ 161.583376][ T3423] vhci_hcd: disconnect device [ 161.588289][ T7188] vhci_hcd: connection reset by peer [ 161.594890][ T3423] vhci_hcd: stop threads [ 161.599261][ T3423] vhci_hcd: release socket [ 161.603810][ T3423] vhci_hcd: disconnect device [ 161.610403][ T3423] vhci_hcd: stop threads [ 161.614754][ T3423] vhci_hcd: release socket [ 161.619572][ T3423] vhci_hcd: disconnect device [ 161.625202][ T3423] vhci_hcd: stop threads [ 161.629660][ T3423] vhci_hcd: release socket [ 161.634703][ T3423] vhci_hcd: disconnect device [ 161.641660][ T3423] vhci_hcd: stop threads [ 161.646028][ T3423] vhci_hcd: release socket [ 161.650616][ T3423] vhci_hcd: disconnect device [ 162.316594][ T7226] netlink: 'syz.9.877': attribute type 27 has an invalid length. [ 162.332261][ T7232] loop0: detected capacity change from 0 to 128 [ 162.393087][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.877'. [ 162.494222][ T7226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.494769][ T7238] SELinux: failed to load policy [ 162.512166][ T7226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.539352][ T7227] 9pnet: p9_errstr2errno: server reported unknown error [ 162.576666][ T30] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.597667][ T12] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.606930][ T12] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.616604][ T12] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.628098][ T12] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.686172][ T30] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.736232][ T1027] Process accounting resumed [ 162.772969][ T30] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.833161][ T30] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.891759][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 162.891778][ T29] audit: type=1400 audit(1756822488.354:5096): avc: denied { block_suspend } for pid=7245 comm="syz.7.880" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.922924][ T30] bridge_slave_1: left allmulticast mode [ 162.928990][ T30] bridge_slave_1: left promiscuous mode [ 162.934786][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.945384][ T30] bridge_slave_0: left allmulticast mode [ 162.951492][ T30] bridge_slave_0: left promiscuous mode [ 162.957457][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.978661][ T29] audit: type=1400 audit(1756822488.384:5097): avc: denied { name_bind } for pid=7245 comm="syz.7.880" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 163.004609][ T29] audit: type=1400 audit(1756822488.384:5098): avc: denied { node_bind } for pid=7245 comm="syz.7.880" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 163.105949][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.132783][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.161793][ T30] bond0 (unregistering): (slave team0): Releasing backup interface [ 163.181041][ T30] bond0 (unregistering): Released all slaves [ 163.268869][ T30] hsr_slave_0: left promiscuous mode [ 163.277584][ T30] hsr_slave_1: left promiscuous mode [ 163.289465][ T30] veth1_macvtap: left promiscuous mode [ 163.298801][ T30] veth0_macvtap: left promiscuous mode [ 163.310040][ T30] veth1_vlan: left promiscuous mode [ 163.316239][ T30] veth0_vlan: left promiscuous mode [ 163.430608][ T30] team0 (unregistering): Port device team_slave_1 removed [ 163.442416][ T30] team0 (unregistering): Port device team_slave_0 removed [ 163.532534][ T29] audit: type=1400 audit(1756822488.994:5099): avc: denied { create } for pid=7257 comm="syz.0.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.573580][ T7258] loop0: detected capacity change from 0 to 512 [ 163.584540][ T7263] tipc: Started in network mode [ 163.589522][ T7263] tipc: Node identity 6e38d9a68243, cluster identity 4711 [ 163.597133][ T7263] tipc: Enabled bearer , priority 0 [ 163.621040][ T7258] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 163.631890][ T7263] tipc: Disabling bearer [ 163.632999][ T7258] EXT4-fs (loop0): orphan cleanup on readonly fs [ 163.647255][ T7258] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.896: corrupted inode contents [ 163.659648][ T7258] EXT4-fs (loop0): Remounting filesystem read-only [ 163.667647][ T7258] EXT4-fs (loop0): 1 truncate cleaned up [ 163.674368][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 163.686636][ T12] Quota error (device loop0): write_blk: dquota write failed [ 163.694373][ T12] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 163.705810][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 163.716764][ T12] Quota error (device loop0): write_blk: dquota write failed [ 163.724773][ T12] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 163.738734][ T12] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 163.741296][ T29] audit: type=1400 audit(1756822489.194:5100): avc: denied { ioctl } for pid=7267 comm="syz.2.899" path="socket:[20001]" dev="sockfs" ino=20001 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.749324][ T12] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 163.785800][ T7258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.232846][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.279307][ T7276] loop5: detected capacity change from 0 to 2048 [ 164.308766][ T7280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.319351][ T7280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.370708][ T7284] netlink: 'syz.0.885': attribute type 10 has an invalid length. [ 164.394460][ T7276] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.423991][ T7287] loop0: detected capacity change from 0 to 512 [ 164.436631][ T7287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.477228][ T7287] EXT4-fs: Ignoring removed i_version option [ 164.502577][ T7276] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.890: bg 0: block 120: padding at end of block bitmap is not set [ 164.567107][ T7284] team0: Port device dummy0 added [ 164.640678][ T7291] lo speed is unknown, defaulting to 1000 [ 164.649515][ T7291] lo speed is unknown, defaulting to 1000 [ 164.748215][ T7291] lo speed is unknown, defaulting to 1000 [ 164.984807][ T7287] EXT4-fs (loop0): 1 orphan inode deleted [ 164.999348][ T7287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.027274][ T3972] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 165.045473][ T7284] netlink: 'syz.0.885': attribute type 10 has an invalid length. [ 165.234557][ T7296] loop9: detected capacity change from 0 to 8192 [ 165.297621][ T7284] team0: Port device dummy0 removed [ 165.414090][ T7284] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 165.458175][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.805278][ T7322] loop9: detected capacity change from 0 to 512 [ 165.820094][ T7322] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 165.837394][ T7322] EXT4-fs (loop9): 1 truncate cleaned up [ 165.857402][ T7322] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.881149][ T7325] 9pnet: p9_errstr2errno: server reported unknown error [ 165.890099][ T7322] EXT4-fs error (device loop9): ext4_ext_precache:632: inode #15: comm syz.9.914: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 165.946876][ T6848] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.975290][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.993501][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.006665][ T7330] netlink: 36 bytes leftover after parsing attributes in process `syz.5.906'. [ 166.020447][ T7330] netlink: 16 bytes leftover after parsing attributes in process `syz.5.906'. [ 166.033344][ T7330] netlink: 36 bytes leftover after parsing attributes in process `syz.5.906'. [ 166.044181][ T7330] netlink: 36 bytes leftover after parsing attributes in process `syz.5.906'. [ 166.058084][ T7329] loop9: detected capacity change from 0 to 1024 [ 166.093249][ T7329] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.107466][ T7329] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.402930][ T7340] netlink: 132 bytes leftover after parsing attributes in process `syz.0.909'. [ 166.466708][ T7342] loop0: detected capacity change from 0 to 1024 [ 166.491564][ T7342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.579922][ T6332] usb 11-1: enqueue for inactive port 0 [ 166.589398][ T6332] usb 11-1: enqueue for inactive port 0 [ 166.646308][ T6848] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.670701][ T6332] vhci_hcd: vhci_device speed not set [ 166.732548][ T7351] netlink: 'syz.9.911': attribute type 10 has an invalid length. [ 166.757057][ T7342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=7342 comm=syz.0.910 [ 166.776301][ T7351] team0: Port device dummy0 added [ 166.794570][ T7354] loop9: detected capacity change from 0 to 512 [ 166.810300][ T7354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.830054][ T7354] EXT4-fs: Ignoring removed i_version option [ 166.851692][ T7354] EXT4-fs (loop9): 1 orphan inode deleted [ 166.885290][ T7356] loop5: detected capacity change from 0 to 512 [ 166.911720][ T7354] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.938506][ T7362] tipc: Enabled bearer , priority 0 [ 166.962964][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.983839][ T7356] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 166.996409][ T7356] EXT4-fs (loop5): orphan cleanup on readonly fs [ 167.005385][ T7362] tipc: Disabling bearer [ 167.025268][ T7356] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.916: corrupted inode contents [ 167.046239][ T7351] netlink: 'syz.9.911': attribute type 10 has an invalid length. [ 167.058222][ T7356] EXT4-fs (loop5): Remounting filesystem read-only [ 167.058378][ T7356] EXT4-fs (loop5): 1 truncate cleaned up [ 167.080293][ T51] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 167.094684][ T51] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 167.201758][ T7351] team0: Port device dummy0 removed [ 167.209601][ T51] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 167.241159][ T7356] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.271752][ T7351] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 167.302299][ T7368] lo speed is unknown, defaulting to 1000 [ 167.312838][ T7368] lo speed is unknown, defaulting to 1000 [ 167.390446][ T7368] lo speed is unknown, defaulting to 1000 [ 167.784002][ T6848] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.829027][ T3972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.854726][ T7373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 167.920331][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 167.920350][ T29] audit: type=1326 audit(1756822493.384:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.0.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40229ebe9 code=0x7ffc0000 [ 167.930442][ T7372] lo speed is unknown, defaulting to 1000 [ 167.931261][ T29] audit: type=1326 audit(1756822493.384:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.0.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40229ebe9 code=0x7ffc0000 [ 168.021420][ T7372] lo speed is unknown, defaulting to 1000 [ 168.074852][ T29] audit: type=1400 audit(1756822493.424:5288): avc: denied { create } for pid=7375 comm="syz.9.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.097011][ T29] audit: type=1400 audit(1756822493.424:5289): avc: denied { relabelfrom } for pid=7375 comm="syz.9.917" name="" dev="pipefs" ino=20238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 168.132242][ T7376] bond0: (slave team0): Releasing backup interface [ 168.184764][ T7376] bond0: (slave dummy0): Releasing backup interface [ 168.215056][ T7376] bridge_slave_0: left allmulticast mode [ 168.221313][ T7376] bridge_slave_0: left promiscuous mode [ 168.228796][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.264234][ T7376] bridge_slave_1: left allmulticast mode [ 168.270693][ T7376] bridge_slave_1: left promiscuous mode [ 168.279221][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.320414][ T7379] loop5: detected capacity change from 0 to 8192 [ 168.340201][ T7376] bond0: (slave bond_slave_0): Releasing backup interface [ 168.370920][ T7376] bond0: (slave bond_slave_1): Releasing backup interface [ 168.372934][ T7376] team0: Port device team_slave_0 removed [ 168.373924][ T7376] team0: Port device team_slave_1 removed [ 168.374188][ T7376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.385036][ T7376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.399469][ T7376] team0: Port device bridge1 removed [ 168.410841][ T7387] tipc: Enabled bearer , priority 0 [ 168.410910][ T7372] lo speed is unknown, defaulting to 1000 [ 168.439615][ T7383] tipc: Disabling bearer [ 168.455844][ T7395] 9pnet: p9_errstr2errno: server reported unknown error [ 168.577989][ T29] audit: type=1400 audit(1756822494.034:5290): avc: denied { bind } for pid=7397 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.614403][ T29] audit: type=1400 audit(1756822494.074:5291): avc: denied { setopt } for pid=7397 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.616412][ T29] audit: type=1400 audit(1756822494.074:5292): avc: denied { create } for pid=7397 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.617525][ T29] audit: type=1400 audit(1756822494.074:5293): avc: denied { setopt } for pid=7397 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.658397][ T7398] $Hÿ: (slave dummy0): Releasing backup interface [ 168.945493][ T29] audit: type=1400 audit(1756822494.404:5294): avc: denied { read write } for pid=7410 comm="syz.2.938" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 168.969294][ T29] audit: type=1400 audit(1756822494.404:5295): avc: denied { open } for pid=7410 comm="syz.2.938" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 168.995025][ T3411] hid_parser_main: 18 callbacks suppressed [ 168.995049][ T3411] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 169.016885][ T3411] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.053065][ T7426] fido_id[7426]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 169.061038][ T7422] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 169.579508][ T7448] netlink: 'syz.9.931': attribute type 10 has an invalid length. [ 169.635496][ T7449] loop9: detected capacity change from 0 to 512 [ 169.644090][ T7448] bond0: (slave dummy0): Releasing backup interface [ 169.655965][ T7449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.697234][ T7449] EXT4-fs: Ignoring removed i_version option [ 169.740625][ T7449] EXT4-fs (loop9): 1 orphan inode deleted [ 169.749562][ T7449] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.776992][ T7449] netlink: 'syz.9.931': attribute type 10 has an invalid length. [ 169.808395][ T7448] team0: Port device dummy0 added [ 169.828131][ T7449] team0: Port device dummy0 removed [ 169.837530][ T7449] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 169.879347][ T6848] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.926558][ T7456] loop9: detected capacity change from 0 to 512 [ 169.965541][ T7456] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 170.008438][ T7456] EXT4-fs (loop9): orphan cleanup on readonly fs [ 170.042025][ T7456] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.933: corrupted inode contents [ 170.101225][ T7456] EXT4-fs (loop9): Remounting filesystem read-only [ 170.150158][ T7456] EXT4-fs (loop9): 1 truncate cleaned up [ 170.159183][ T30] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 170.174774][ T30] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 170.245742][ T30] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 170.286501][ T7456] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.601006][ T7473] loop0: detected capacity change from 0 to 2048 [ 170.652595][ T7475] lo speed is unknown, defaulting to 1000 [ 170.659478][ T7475] lo speed is unknown, defaulting to 1000 [ 170.729229][ T7475] lo speed is unknown, defaulting to 1000 [ 171.042348][ T7473] Alternate GPT is invalid, using primary GPT. [ 171.049613][ T7473] loop0: p1 p2 p3 [ 171.117468][ T2994] Alternate GPT is invalid, using primary GPT. [ 171.123810][ T2994] loop0: p1 p2 p3 [ 171.243431][ T6848] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.342397][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 171.342439][ T4440] udevd[4440]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 171.371526][ T6881] udevd[6881]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 171.447520][ T3768] udevd[3768]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 171.447800][ T6881] udevd[6881]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 171.459261][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 171.485427][ T7483] lo speed is unknown, defaulting to 1000 [ 171.494839][ T7483] lo speed is unknown, defaulting to 1000 [ 171.550115][ T7483] lo speed is unknown, defaulting to 1000 [ 171.619014][ T7487] loop9: detected capacity change from 0 to 1756 [ 171.825719][ T7506] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7506 comm=syz.7.948 [ 171.995807][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'. [ 172.068242][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'. [ 172.119154][ T7509] ref_ctr_offset mismatch. inode: 0x47c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 172.582395][ T7519] loop0: detected capacity change from 0 to 128 [ 172.595314][ T4459] udevd[4459]: incorrect ext4 checksum on /dev/loop0 [ 172.856782][ T7530] program syz.9.954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.980002][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 172.980016][ T29] audit: type=1400 audit(1756822498.444:5732): avc: denied { create } for pid=7537 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.013407][ T29] audit: type=1400 audit(1756822498.474:5733): avc: denied { bind } for pid=7537 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.035639][ T29] audit: type=1400 audit(1756822498.474:5734): avc: denied { setopt } for pid=7537 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.056136][ T29] audit: type=1400 audit(1756822498.474:5735): avc: denied { write } for pid=7537 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.076483][ T29] audit: type=1400 audit(1756822498.474:5736): avc: denied { read } for pid=7537 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.097142][ T29] audit: type=1400 audit(1756822498.474:5737): avc: denied { create } for pid=7537 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.116716][ T29] audit: type=1400 audit(1756822498.474:5738): avc: denied { connect } for pid=7537 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.137790][ T29] audit: type=1400 audit(1756822498.474:5739): avc: denied { create } for pid=7537 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 173.171448][ T29] audit: type=1326 audit(1756822498.554:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7539 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 173.195869][ T29] audit: type=1326 audit(1756822498.554:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7539 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 173.196794][ T7546] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 173.228718][ T7546] vhci_hcd: default hub control req: 6003 v00e2 i0002 l0 [ 173.261411][ T7549] lo speed is unknown, defaulting to 1000 [ 173.267516][ T7549] lo speed is unknown, defaulting to 1000 [ 173.305932][ T7549] lo speed is unknown, defaulting to 1000 [ 173.373741][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.384355][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.934626][ T7568] netlink: 36 bytes leftover after parsing attributes in process `syz.9.969'. [ 173.949835][ T7568] loop9: detected capacity change from 0 to 128 [ 173.972810][ T7568] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 174.020734][ T7568] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.108049][ T7573] netlink: 256 bytes leftover after parsing attributes in process `syz.5.971'. [ 174.182503][ T7568] hub 8-0:1.0: USB hub found [ 174.187912][ T7568] hub 8-0:1.0: 8 ports detected [ 174.296334][ T6848] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.308505][ T7581] lo speed is unknown, defaulting to 1000 [ 174.317125][ T7581] lo speed is unknown, defaulting to 1000 [ 174.582339][ T7589] loop9: detected capacity change from 0 to 128 [ 174.596618][ T7587] loop0: detected capacity change from 0 to 2048 [ 174.617876][ T7581] lo speed is unknown, defaulting to 1000 [ 174.762041][ T7587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.992101][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.289644][ T7605] loop5: detected capacity change from 0 to 1024 [ 175.324684][ T7605] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.332676][ T7605] EXT4-fs: Ignoring removed bh option [ 175.425439][ T7605] ext3: Unknown parameter 'subj_type' [ 175.758196][ T7613] loop0: detected capacity change from 0 to 2048 [ 175.805522][ T7614] loop9: detected capacity change from 0 to 512 [ 175.820705][ T7614] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.845379][ T7613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.886652][ T7614] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.912378][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.7.983'. [ 175.948111][ T7614] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.970070][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.7.983'. [ 175.997057][ T7631] syzkaller1: entered promiscuous mode [ 176.002804][ T7631] syzkaller1: entered allmulticast mode [ 176.010816][ T7614] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.982: corrupted xattr block 19: overlapping e_value [ 176.025403][ T7614] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 176.035642][ T7614] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.982: corrupted xattr block 19: overlapping e_value [ 176.052278][ T7614] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 176.063809][ T7614] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.982: corrupted xattr block 19: overlapping e_value [ 176.096220][ T6848] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.184317][ T7637] !: renamed from dummy0 (while UP) [ 176.310486][ T7646] random: crng reseeded on system resumption [ 176.501653][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.623624][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.993'. [ 176.639735][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.994'. [ 176.645245][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.993'. [ 176.744708][ T7657] loop0: detected capacity change from 0 to 1024 [ 176.770509][ T7668] Falling back ldisc for ttyS3. [ 176.792563][ T7657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.807808][ T7657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.991'. [ 176.871000][ T7675] smc: net device bond0 applied user defined pnetid SYZ0 [ 176.894921][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.928636][ T7675] smc: net device bond0 erased user defined pnetid SYZ0 [ 176.996344][ T7683] loop0: detected capacity change from 0 to 128 [ 177.008011][ T4459] udevd[4459]: incorrect ext4 checksum on /dev/loop0 [ 177.125835][ T7689] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1002'. [ 177.136287][ T7689] hsr_slave_0: left promiscuous mode [ 177.146402][ T7689] hsr_slave_1: left promiscuous mode [ 177.886146][ T7698] loop5: detected capacity change from 0 to 512 [ 177.997848][ T29] kauditd_printk_skb: 714 callbacks suppressed [ 177.997867][ T29] audit: type=1400 audit(1756822503.454:6456): avc: denied { write } for pid=7702 comm="syz.0.1007" name="file0" dev="tmpfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 178.070678][ T29] audit: type=1400 audit(1756822503.454:6457): avc: denied { open } for pid=7702 comm="syz.0.1007" path="/210/file0" dev="tmpfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 178.096304][ T29] audit: type=1400 audit(1756822503.454:6458): avc: denied { ioctl } for pid=7702 comm="syz.0.1007" path="/210/file0" dev="tmpfs" ino=1200 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 178.126918][ T29] audit: type=1326 audit(1756822503.494:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.9.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1aff05ba7 code=0x7ffc0000 [ 178.158093][ T29] audit: type=1326 audit(1756822503.494:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.9.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1afeaadb9 code=0x7ffc0000 [ 178.186952][ T29] audit: type=1326 audit(1756822503.494:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.9.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 178.218891][ T29] audit: type=1326 audit(1756822503.494:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.9.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1aff05ba7 code=0x7ffc0000 [ 178.250336][ T29] audit: type=1326 audit(1756822503.494:6463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.9.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1afeaadb9 code=0x7ffc0000 [ 178.277332][ T29] audit: type=1326 audit(1756822503.494:6464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.9.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 178.310285][ T29] audit: type=1326 audit(1756822503.504:6465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.9.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 178.377062][ T7714] syzkaller0: entered promiscuous mode [ 178.382769][ T7714] syzkaller0: entered allmulticast mode [ 178.436536][ T7723] loop5: detected capacity change from 0 to 1024 [ 178.501089][ T7723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.524891][ T7731] loop9: detected capacity change from 0 to 128 [ 178.556217][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 178.562523][ T4459] udevd[4459]: incorrect ext4 checksum on /dev/loop9 [ 178.566000][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 178.597041][ T7734] ref_ctr_offset mismatch. inode: 0x48f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 178.648947][ T1027] IPVS: starting estimator thread 0... [ 178.745868][ T7745] openvswitch: netlink: Message has 6 unknown bytes. [ 178.829863][ T7739] IPVS: using max 2400 ests per chain, 120000 per kthread [ 178.927174][ T3972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.006574][ T7748] lo speed is unknown, defaulting to 1000 [ 179.013624][ T7748] lo speed is unknown, defaulting to 1000 [ 179.083689][ T7748] lo speed is unknown, defaulting to 1000 [ 179.424199][ T7752] serio: Serial port ttyS3 [ 179.462508][ T7753] netfs: Couldn't get user pages (rc=-14) [ 179.735984][ T7760] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1021'. [ 179.795658][ T7767] lo speed is unknown, defaulting to 1000 [ 179.803752][ T7767] lo speed is unknown, defaulting to 1000 [ 179.864362][ T7774] loop9: detected capacity change from 0 to 128 [ 179.875953][ T4459] udevd[4459]: incorrect ext4 checksum on /dev/loop9 [ 179.933128][ T7767] lo speed is unknown, defaulting to 1000 [ 180.604022][ T7789] loop5: detected capacity change from 0 to 1024 [ 180.612237][ T7789] EXT4-fs: quotafile must be on filesystem root [ 180.634129][ T7793] loop0: detected capacity change from 0 to 128 [ 180.671808][ T4440] udevd[4440]: incorrect ext4 checksum on /dev/loop0 [ 180.729412][ T7799] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7799 comm=syz.9.1034 [ 180.815435][ T7803] serio: Serial port ttyS3 [ 180.913887][ T7811] openvswitch: netlink: Message has 6 unknown bytes. [ 181.143633][ T7816] lo speed is unknown, defaulting to 1000 [ 181.154020][ T7816] lo speed is unknown, defaulting to 1000 [ 181.233545][ T7816] lo speed is unknown, defaulting to 1000 [ 181.784419][ T7825] loop0: detected capacity change from 0 to 128 [ 181.807234][ T4459] udevd[4459]: incorrect ext4 checksum on /dev/loop0 [ 181.879676][ T7830] loop9: detected capacity change from 0 to 2048 [ 181.887255][ T7830] /dev/loop9: Can't open blockdev [ 181.897285][ T7827] SELinux: failed to load policy [ 182.661805][ T7849] loop0: detected capacity change from 0 to 128 [ 182.688973][ T4459] udevd[4459]: incorrect ext4 checksum on /dev/loop0 [ 183.122720][ T7861] loop9: detected capacity change from 0 to 764 [ 183.132415][ T7861] iso9660: Bad value for 'uid' [ 183.137213][ T7861] iso9660: Bad value for 'uid' [ 183.179535][ T7861] smc: net device bond0 applied user defined pnetid SYZ0 [ 183.193920][ T7861] smc: net device bond0 erased user defined pnetid SYZ0 [ 183.318850][ T29] kauditd_printk_skb: 537 callbacks suppressed [ 183.318879][ T29] audit: type=1400 audit(1756822508.774:7003): avc: denied { setopt } for pid=7866 comm="syz.9.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.788885][ T7880] loop0: detected capacity change from 0 to 128 [ 184.790870][ T29] audit: type=1326 audit(1756822510.254:7004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 184.825155][ T29] audit: type=1326 audit(1756822510.284:7005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 184.850181][ T29] audit: type=1326 audit(1756822510.284:7006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 184.879132][ T29] audit: type=1326 audit(1756822510.284:7007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 184.904559][ T29] audit: type=1326 audit(1756822510.284:7008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 184.930265][ T29] audit: type=1326 audit(1756822510.284:7009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 184.954153][ T29] audit: type=1326 audit(1756822510.284:7010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 184.978633][ T29] audit: type=1326 audit(1756822510.284:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 185.004153][ T29] audit: type=1326 audit(1756822510.284:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.2.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805421ebe9 code=0x7ffc0000 [ 185.042601][ T7885] loop9: detected capacity change from 0 to 128 [ 185.289874][ T7902] lo speed is unknown, defaulting to 1000 [ 185.297505][ T7902] lo speed is unknown, defaulting to 1000 [ 185.374450][ T7902] lo speed is unknown, defaulting to 1000 [ 185.957476][ T51] bio_check_eod: 3 callbacks suppressed [ 185.957492][ T51] kworker/u8:3: attempt to access beyond end of device [ 185.957492][ T51] loop9: rw=1, sector=145, nr_sectors = 16 limit=128 [ 185.994668][ T51] kworker/u8:3: attempt to access beyond end of device [ 185.994668][ T51] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 186.014308][ T51] kworker/u8:3: attempt to access beyond end of device [ 186.014308][ T51] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 186.034410][ T51] kworker/u8:3: attempt to access beyond end of device [ 186.034410][ T51] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 186.053928][ T51] kworker/u8:3: attempt to access beyond end of device [ 186.053928][ T51] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 186.069230][ T51] kworker/u8:3: attempt to access beyond end of device [ 186.069230][ T51] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 186.084192][ T51] kworker/u8:3: attempt to access beyond end of device [ 186.084192][ T51] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 186.098529][ T51] kworker/u8:3: attempt to access beyond end of device [ 186.098529][ T51] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 186.115325][ T51] kworker/u8:3: attempt to access beyond end of device [ 186.115325][ T51] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 186.138034][ T51] kworker/u8:3: attempt to access beyond end of device [ 186.138034][ T51] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 186.155399][ T7918] loop0: detected capacity change from 0 to 128 [ 186.165597][ T7914] smc: net device bond0 applied user defined pnetid SYZ0 [ 186.183489][ T7914] smc: net device bond0 erased user defined pnetid SYZ0 [ 186.680181][ T7935] lo speed is unknown, defaulting to 1000 [ 186.687469][ T7935] lo speed is unknown, defaulting to 1000 [ 186.732055][ T7935] lo speed is unknown, defaulting to 1000 [ 188.152741][ T7939] loop0: detected capacity change from 0 to 1024 [ 188.329806][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 188.329826][ T29] audit: type=1326 audit(1756822513.784:7136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7927 comm="syz.7.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d93aebe9 code=0x7ffc0000 [ 188.444337][ T7951] loop9: detected capacity change from 0 to 8192 [ 188.464034][ T7951] msdos: Unknown parameter 'A' [ 188.503736][ T29] audit: type=1326 audit(1756822513.854:7137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7927 comm="syz.7.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d93aebe9 code=0x7ffc0000 [ 188.583327][ T7939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.640899][ T7939] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1071: Allocating blocks 385-513 which overlap fs metadata [ 188.666683][ T29] audit: type=1326 audit(1756822514.124:7138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.9.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 188.701176][ T29] audit: type=1326 audit(1756822514.124:7139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.9.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 188.702698][ T7949] lo speed is unknown, defaulting to 1000 [ 188.731933][ T29] audit: type=1326 audit(1756822514.124:7140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.9.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 188.731977][ T29] audit: type=1326 audit(1756822514.124:7141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.9.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 188.744921][ T7949] lo speed is unknown, defaulting to 1000 [ 188.770538][ T29] audit: type=1326 audit(1756822514.124:7142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.9.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 188.824416][ T7939] EXT4-fs (loop0): pa ffff888105880a80: logic 16, phys. 129, len 24 [ 188.838309][ T29] audit: type=1326 audit(1756822514.124:7143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.9.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 188.847856][ T7939] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, [ 188.880430][ T29] audit: type=1326 audit(1756822514.124:7144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.9.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 188.880476][ T29] audit: type=1326 audit(1756822514.124:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.9.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 188.917313][ T7959] loop5: detected capacity change from 0 to 128 [ 188.942731][ T7939] free 0, pa_free 8 [ 188.965388][ T7949] lo speed is unknown, defaulting to 1000 [ 188.971615][ T4459] udevd[4459]: incorrect ext4 checksum on /dev/loop5 [ 189.066628][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.133812][ T7975] loop0: detected capacity change from 0 to 128 [ 189.236015][ T7979] loop9: detected capacity change from 0 to 764 [ 189.256751][ T7979] iso9660: Bad value for 'uid' [ 189.262440][ T7979] iso9660: Bad value for 'uid' [ 189.313447][ T7981] lo speed is unknown, defaulting to 1000 [ 189.322442][ T7981] lo speed is unknown, defaulting to 1000 [ 189.409394][ T7981] lo speed is unknown, defaulting to 1000 [ 189.613590][ T7979] smc: net device bond0 applied user defined pnetid SYZ0 [ 190.060453][ T7979] smc: net device bond0 erased user defined pnetid SYZ0 [ 191.704389][ T8019] loop5: detected capacity change from 0 to 512 [ 191.746442][ T8019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.811404][ T8018] lo speed is unknown, defaulting to 1000 [ 191.823363][ T8019] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.884866][ T8018] lo speed is unknown, defaulting to 1000 [ 191.975744][ T8018] lo speed is unknown, defaulting to 1000 [ 192.045567][ T8026] loop9: detected capacity change from 0 to 128 [ 192.074591][ T8024] loop0: detected capacity change from 0 to 8192 [ 192.106703][ T8024] msdos: Unknown parameter 'A' [ 192.210173][ T3972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.259172][ T8033] loop5: detected capacity change from 0 to 764 [ 192.283435][ T8033] iso9660: Bad value for 'uid' [ 192.291486][ T8033] iso9660: Bad value for 'uid' [ 192.317768][ T8033] smc: net device bond0 applied user defined pnetid SYZ0 [ 192.335323][ T8033] smc: net device bond0 erased user defined pnetid SYZ0 [ 192.414182][ T8040] loop0: detected capacity change from 0 to 128 [ 192.431911][ T4459] udevd[4459]: incorrect ext4 checksum on /dev/loop0 [ 193.520561][ T8059] lo speed is unknown, defaulting to 1000 [ 193.532964][ T8059] lo speed is unknown, defaulting to 1000 [ 193.663942][ T8059] lo speed is unknown, defaulting to 1000 [ 194.642759][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 194.642777][ T29] audit: type=1326 audit(1756822520.104:7402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40229ebe9 code=0x7ffc0000 [ 194.691378][ T8068] loop9: detected capacity change from 0 to 1024 [ 194.703858][ T29] audit: type=1326 audit(1756822520.114:7403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fc40229ebe9 code=0x7ffc0000 [ 194.733785][ T29] audit: type=1326 audit(1756822520.114:7404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40229ebe9 code=0x7ffc0000 [ 194.766410][ T29] audit: type=1326 audit(1756822520.114:7405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40229ebe9 code=0x7ffc0000 [ 194.803368][ T29] audit: type=1326 audit(1756822520.114:7406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc40229ebe9 code=0x7ffc0000 [ 194.833870][ T29] audit: type=1326 audit(1756822520.114:7407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40229ebe9 code=0x7ffc0000 [ 194.864503][ T29] audit: type=1326 audit(1756822520.114:7408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40229ebe9 code=0x7ffc0000 [ 194.898936][ T29] audit: type=1326 audit(1756822520.114:7409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc40229ebe9 code=0x7ffc0000 [ 194.933113][ T29] audit: type=1326 audit(1756822520.114:7410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40229ebe9 code=0x7ffc0000 [ 194.975248][ T29] audit: type=1326 audit(1756822520.114:7411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc4022a0a7c code=0x7ffc0000 [ 195.014484][ T8068] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.351783][ T8068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=8068 comm=syz.9.1106 [ 195.430434][ T6848] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.463315][ T8085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8085 comm=syz.7.1121 [ 195.484461][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1121'. [ 195.524945][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1121'. [ 195.588739][ T8090] lo speed is unknown, defaulting to 1000 [ 195.603909][ T8090] lo speed is unknown, defaulting to 1000 [ 195.665021][ T8095] loop0: detected capacity change from 0 to 764 [ 195.712056][ T8095] iso9660: Bad value for 'uid' [ 195.719711][ T8095] iso9660: Bad value for 'uid' [ 195.742083][ T8090] lo speed is unknown, defaulting to 1000 [ 195.794815][ T8092] loop9: detected capacity change from 0 to 8192 [ 195.806660][ T8092] msdos: Unknown parameter 'A' [ 195.882481][ T8095] smc: net device bond0 applied user defined pnetid SYZ0 [ 196.060603][ T8095] smc: net device bond0 erased user defined pnetid SYZ0 [ 196.786726][ T8108] loop0: detected capacity change from 0 to 512 [ 196.843744][ T8108] EXT4-fs (loop0): orphan cleanup on readonly fs [ 196.853437][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1119'. [ 196.877014][ T8108] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1118: bg 0: block 248: padding at end of block bitmap is not set [ 196.920101][ T8108] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1118: Failed to acquire dquot type 1 [ 196.941327][ T8114] loop5: detected capacity change from 0 to 128 [ 196.959835][ T4459] udevd[4459]: incorrect ext4 checksum on /dev/loop5 [ 196.973765][ T8108] EXT4-fs (loop0): 1 truncate cleaned up [ 197.437159][ T8124] lo speed is unknown, defaulting to 1000 [ 197.437495][ T8124] lo speed is unknown, defaulting to 1000 [ 197.605602][ T8124] lo speed is unknown, defaulting to 1000 [ 198.221920][ T8108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.381268][ T8133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8133 comm=syz.9.1127 [ 198.420389][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1127'. [ 198.463518][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1127'. [ 198.551444][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1131'. [ 198.571772][ T8139] loop5: detected capacity change from 0 to 512 [ 198.658577][ T8139] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 198.673283][ T8139] EXT4-fs (loop5): orphan cleanup on readonly fs [ 198.714684][ T8139] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1129: corrupted inode contents [ 198.774388][ T8139] EXT4-fs (loop5): Remounting filesystem read-only [ 198.777978][ T8139] EXT4-fs (loop5): 1 truncate cleaned up [ 198.778356][ T30] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 198.778394][ T30] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 198.778421][ T30] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 198.858265][ T8139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.932571][ T8139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.384112][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.406428][ T8154] loop5: detected capacity change from 0 to 1024 [ 199.408168][ T8157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.443667][ T8157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.495639][ T8154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.565372][ T8154] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1135: Allocating blocks 385-513 which overlap fs metadata [ 199.593694][ T8154] EXT4-fs (loop5): pa ffff888106e835b0: logic 16, phys. 129, len 24 [ 199.604885][ T8154] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 199.648249][ T3972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.702558][ T3411] IPVS: starting estimator thread 0... [ 199.711595][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 199.711609][ T29] audit: type=1400 audit(1756822525.174:7843): avc: denied { write } for pid=8164 comm="syz.9.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 199.747529][ T29] audit: type=1400 audit(1756822525.174:7844): avc: denied { setopt } for pid=8164 comm="syz.9.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 199.778800][ T8165] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 199.829936][ T8171] IPVS: using max 2448 ests per chain, 122400 per kthread [ 199.924953][ T8173] loop9: detected capacity change from 0 to 1024 [ 199.954266][ T8173] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.023323][ T8173] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.121845][ T29] audit: type=1400 audit(1756822525.584:7845): avc: denied { remove_name } for pid=8172 comm="syz.9.1138" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.146356][ T29] audit: type=1400 audit(1756822525.584:7846): avc: denied { rename } for pid=8172 comm="syz.9.1138" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.184689][ T29] audit: type=1400 audit(1756822525.584:7847): avc: denied { unlink } for pid=8172 comm="syz.9.1138" name="file3" dev="loop9" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.218509][ T8173] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 200.253735][ T8173] EXT4-fs (loop9): Remounting filesystem read-only [ 200.443587][ T1027] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 200.466588][ T6848] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.523576][ T8188] loop5: detected capacity change from 0 to 128 [ 200.556891][ T1027] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 200.572024][ T29] audit: type=1326 audit(1756822526.014:7848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8189 comm="syz.9.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 200.602436][ T29] audit: type=1326 audit(1756822526.014:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8189 comm="syz.9.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 200.634069][ T29] audit: type=1326 audit(1756822526.014:7850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8189 comm="syz.9.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 200.662538][ T29] audit: type=1326 audit(1756822526.014:7851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8189 comm="syz.9.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 200.692521][ T29] audit: type=1326 audit(1756822526.014:7852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8189 comm="syz.9.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 200.727425][ T4459] udevd[4459]: incorrect ext4 checksum on /dev/loop5 [ 200.727657][ T8196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8196 comm=syz.0.1145 [ 200.775172][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1145'. [ 200.775208][ T8197] fido_id[8197]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 200.808324][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1145'. [ 201.044381][ T8203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=8203 comm=syz.2.1157 [ 201.432912][ T8219] loop0: detected capacity change from 0 to 128 [ 201.658675][ T8222] loop9: detected capacity change from 0 to 512 [ 201.683044][ T8222] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.698832][ T8222] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.745488][ T8231] loop5: detected capacity change from 0 to 512 [ 201.770611][ T8231] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.793624][ T8231] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 201.813309][ T8231] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 201.824800][ T8231] System zones: 1-12 [ 201.833488][ T8231] EXT4-fs (loop5): 1 truncate cleaned up [ 201.843185][ T8231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.887803][ T8231] lo speed is unknown, defaulting to 1000 [ 201.894836][ T8231] lo speed is unknown, defaulting to 1000 [ 201.997266][ T8231] lo speed is unknown, defaulting to 1000 [ 202.025258][ T8236] IPv6: NLM_F_CREATE should be specified when creating new route [ 202.346249][ T6848] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.557511][ T8240] loop0: detected capacity change from 0 to 128 [ 202.594080][ T8243] loop9: detected capacity change from 0 to 128 [ 202.619644][ T3972] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /206/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 202.620804][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.661294][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.704376][ T3972] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 202.731661][ T3972] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /206/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 202.759149][ T3972] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 202.786458][ T3972] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /206/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 202.816233][ T3972] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 202.852914][ T3972] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /206/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 202.891389][ T3972] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 202.916873][ T3972] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /206/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 202.949146][ T3972] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 203.100199][ T8235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.462579][ T8261] loop0: detected capacity change from 0 to 128 [ 203.519838][ T8262] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1162'. [ 203.602417][ T2799] bond0 (unregistering): (slave team0): Releasing backup interface [ 203.617143][ T2799] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 203.632657][ T2799] bond0 (unregistering): Released all slaves [ 203.650287][ T2799] bond1 (unregistering): Released all slaves [ 203.662154][ T2799] bond2 (unregistering): Released all slaves [ 203.771873][ T2799] tipc: Disabling bearer [ 203.779964][ T2799] tipc: Left network mode [ 203.855611][ T2799] hsr_slave_0: left promiscuous mode [ 204.564105][ T2799] IPVS: stop unused estimator thread 0... [ 204.626045][ T8264] lo speed is unknown, defaulting to 1000 [ 204.655464][ T8264] lo speed is unknown, defaulting to 1000 [ 204.806933][ T8289] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 204.813775][ T8289] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 204.821341][ T8289] vhci_hcd vhci_hcd.0: Device attached [ 204.831296][ T8264] chnl_net:caif_netlink_parms(): no params data found [ 204.858124][ T8297] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 204.868800][ T8297] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 204.876637][ T8297] vhci_hcd vhci_hcd.0: Device attached [ 204.911959][ T8289] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 204.918723][ T8289] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 204.926184][ T8289] vhci_hcd vhci_hcd.0: Device attached [ 204.938026][ T8264] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.945292][ T8264] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.960521][ T8297] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 204.968998][ T8264] bridge_slave_0: entered allmulticast mode [ 205.019836][ T3411] vhci_hcd: vhci_device speed not set [ 205.055347][ T8264] bridge_slave_0: entered promiscuous mode [ 205.067777][ T8289] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 205.082815][ T8264] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.089986][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.098340][ T3411] usb 1-1: new full-speed USB device number 3 using vhci_hcd [ 205.152075][ T8312] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(20) [ 205.158734][ T8312] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 205.166396][ T8312] vhci_hcd vhci_hcd.0: Device attached [ 205.185974][ T8264] bridge_slave_1: entered allmulticast mode [ 205.222858][ T8264] bridge_slave_1: entered promiscuous mode [ 205.274866][ T8264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.303942][ T8289] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(23) [ 205.310596][ T8289] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 205.318244][ T8289] vhci_hcd vhci_hcd.0: Device attached [ 205.329001][ T8264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.358587][ T8316] vhci_hcd: connection closed [ 205.358746][ T8313] vhci_hcd: connection closed [ 205.363941][ T8303] vhci_hcd: connection closed [ 205.369122][ T8298] vhci_hcd: connection closed [ 205.374227][ T8292] vhci_hcd: connection reset by peer [ 205.385182][ T70] vhci_hcd: stop threads [ 205.389514][ T70] vhci_hcd: release socket [ 205.394015][ T70] vhci_hcd: disconnect device [ 205.399868][ T70] vhci_hcd: stop threads [ 205.404156][ T70] vhci_hcd: release socket [ 205.408584][ T70] vhci_hcd: disconnect device [ 205.414046][ T8264] team0: Port device team_slave_0 added [ 205.421082][ T8264] team0: Port device team_slave_1 added [ 205.430054][ T70] vhci_hcd: stop threads [ 205.434329][ T70] vhci_hcd: release socket [ 205.439719][ T70] vhci_hcd: disconnect device [ 205.445094][ T70] vhci_hcd: stop threads [ 205.450436][ T70] vhci_hcd: release socket [ 205.455358][ T70] vhci_hcd: disconnect device [ 205.461554][ T70] vhci_hcd: stop threads [ 205.466333][ T70] vhci_hcd: release socket [ 205.471350][ T70] vhci_hcd: disconnect device [ 205.478170][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.487397][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.516899][ T8264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.529962][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.537616][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.565298][ T8264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.597799][ T8264] hsr_slave_0: entered promiscuous mode [ 205.604889][ T8264] hsr_slave_1: entered promiscuous mode [ 205.636562][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 205.636582][ T29] audit: type=1326 audit(1756822531.094:7985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.9.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 205.669654][ T29] audit: type=1326 audit(1756822531.094:7986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.9.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 205.694166][ T29] audit: type=1326 audit(1756822531.104:7987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.9.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 205.719169][ T29] audit: type=1326 audit(1756822531.104:7988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.9.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 205.743495][ T29] audit: type=1326 audit(1756822531.104:7989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.9.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 205.768313][ T29] audit: type=1326 audit(1756822531.104:7990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.9.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 205.771045][ T8320] loop9: detected capacity change from 0 to 512 [ 205.792912][ T29] audit: type=1326 audit(1756822531.114:7991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.9.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 205.824324][ T29] audit: type=1326 audit(1756822531.114:7992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.9.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 205.849276][ T29] audit: type=1326 audit(1756822531.114:7993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.9.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 205.853234][ T8320] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 205.885051][ T8320] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 205.911831][ T29] audit: type=1326 audit(1756822531.184:7994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.9.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff0ebe9 code=0x7ffc0000 [ 205.941376][ T8320] System zones: 0-1, 15-15, 18-18, 34-34 [ 205.941618][ T8320] EXT4-fs (loop9): orphan cleanup on readonly fs [ 205.941673][ T8320] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 205.941731][ T8320] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 205.942076][ T8320] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1174: bg 0: block 40: padding at end of block bitmap is not set [ 205.942195][ T8320] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 205.942381][ T8320] EXT4-fs (loop9): 1 truncate cleaned up [ 205.942834][ T8320] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.972864][ T8320] EXT4-fs error (device loop9): ext4_encrypted_get_link:46: inode #16: comm syz.9.1174: bad symlink. [ 206.075952][ T6848] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.141882][ T8332] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 206.149526][ T8324] Set syz1 is full, maxelem 65536 reached [ 206.221192][ T8338] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1179'. [ 206.326463][ T8264] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 206.337974][ T8264] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 206.349241][ T8264] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 206.371164][ T8343] loop9: detected capacity change from 0 to 512 [ 206.387303][ T8264] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 206.398906][ T8343] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.432677][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 206.434507][ T8343] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 206.458663][ T8343] EXT4-fs (loop9): 1 truncate cleaned up [ 206.465840][ T8343] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.481691][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 206.498458][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 206.524234][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 206.594613][ T8343] ================================================================== [ 206.603293][ T8343] BUG: KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra [ 206.611872][ T8343] [ 206.614296][ T8343] write to 0xffff88811996fd5c of 4 bytes by task 8356 on cpu 1: [ 206.622573][ T8343] page_cache_sync_ra+0x4e9/0x6c0 [ 206.627746][ T8343] filemap_get_pages+0x2d0/0x1150 [ 206.632812][ T8343] filemap_splice_read+0x3a9/0x740 [ 206.638186][ T8343] ext4_file_splice_read+0x8f/0xb0 [ 206.643433][ T8343] splice_direct_to_actor+0x26f/0x680 [ 206.648928][ T8343] do_splice_direct+0xda/0x150 [ 206.653742][ T8343] do_sendfile+0x380/0x650 [ 206.658190][ T8343] __x64_sys_sendfile64+0x105/0x150 [ 206.664120][ T8343] x64_sys_call+0x2bb0/0x2ff0 [ 206.668845][ T8343] do_syscall_64+0xd2/0x200 [ 206.673482][ T8343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.679416][ T8343] [ 206.681851][ T8343] read to 0xffff88811996fd5c of 4 bytes by task 8343 on cpu 0: [ 206.689509][ T8343] page_cache_sync_ra+0x56f/0x6c0 [ 206.694609][ T8343] filemap_get_pages+0x2d0/0x1150 [ 206.699646][ T8343] filemap_splice_read+0x3a9/0x740 [ 206.704965][ T8343] ext4_file_splice_read+0x8f/0xb0 [ 206.710504][ T8343] splice_direct_to_actor+0x26f/0x680 [ 206.716358][ T8343] do_splice_direct+0xda/0x150 [ 206.721154][ T8343] do_sendfile+0x380/0x650 [ 206.725720][ T8343] __x64_sys_sendfile64+0x105/0x150 [ 206.731059][ T8343] x64_sys_call+0x2bb0/0x2ff0 [ 206.735864][ T8343] do_syscall_64+0xd2/0x200 [ 206.740540][ T8343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.746806][ T8343] [ 206.749141][ T8343] value changed: 0x0000000f -> 0x00000010 [ 206.755046][ T8343] [ 206.757403][ T8343] Reported by Kernel Concurrency Sanitizer on: [ 206.763569][ T8343] CPU: 0 UID: 0 PID: 8343 Comm: syz.9.1180 Not tainted syzkaller #0 PREEMPT(voluntary) [ 206.773395][ T8343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.783482][ T8343] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 206.799644][ T8264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.810884][ T8264] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.829363][ T7610] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.836586][ T7610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.970888][ T7610] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.978087][ T7610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.150916][ T8343] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.472191][ T297] bond0 (unregistering): Released all slaves [ 207.512743][ T297] tipc: Left network mode [ 207.921328][ T297] IPVS: stop unused estimator thread 0... [ 208.602881][ T297] bridge_slave_1: left allmulticast mode [ 208.608681][ T297] bridge_slave_1: left promiscuous mode [ 208.614677][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.622839][ T297] bridge_slave_0: left allmulticast mode [ 208.628561][ T297] bridge_slave_0: left promiscuous mode [ 208.634412][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.721412][ T297] $Hÿ (unregistering): Released all slaves [ 208.730409][ T297] bond0 (unregistering): Released all slaves [ 208.781728][ T297] team0: Port device bridge1 removed [ 208.901860][ T297] bond0 (unregistering): (slave team0): Releasing backup interface [ 208.911172][ T297] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 208.920331][ T297] bond0 (unregistering): Released all slaves [ 208.929301][ T297] bond1 (unregistering): (slave veth3): Releasing active interface [ 208.937888][ T297] bond1 (unregistering): Released all slaves [ 208.946484][ T297] bond2 (unregistering): Released all slaves [ 209.012249][ T297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.024022][ T297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.035743][ T297] bond0 (unregistering): (slave 0!): Releasing backup interface [ 209.047090][ T297] bond0 (unregistering): Released all slaves [ 209.055502][ T297] bond1 (unregistering): Released all slaves [ 209.115154][ T297] tipc: Disabling bearer [ 209.120541][ T297] tipc: Left network mode [ 209.125451][ T297] tipc: Disabling bearer [ 209.130815][ T297] tipc: Left network mode [ 209.140038][ T297] tipc: Left network mode [ 209.195599][ T297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.204239][ T297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.213391][ T297] pim6reg (unregistering): left allmulticast mode [ 209.257144][ T3423] smc: removing ib device sz1 [ 209.378543][ T297] team0 (unregistering): Port device team_slave_1 removed [ 209.389393][ T297] team0 (unregistering): Port device team_slave_0 removed [ 209.923316][ T297] IPVS: stop unused estimator thread 0... [ 209.929561][ T297] IPVS: stop unused estimator thread 0... [ 209.936130][ T297] IPVS: stop unused estimator thread 0... [ 210.179934][ T3411] usb 1-1: enqueue for inactive port 0 [ 210.187547][ T3411] usb 1-1: enqueue for inactive port 0 [ 210.211501][ T297] bridge_slave_1: left allmulticast mode [ 210.217210][ T297] bridge_slave_1: left promiscuous mode [ 210.223742][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.231643][ T297] bridge_slave_0: left allmulticast mode [ 210.237462][ T297] bridge_slave_0: left promiscuous mode [ 210.243422][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.260470][ T3411] vhci_hcd: vhci_device speed not set [ 210.322151][ T297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.332778][ T297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.343049][ T297] bond0 (unregistering): Released all slaves [ 210.373847][ T297] hsr_slave_0: left promiscuous mode [ 210.379794][ T297] hsr_slave_1: left promiscuous mode [ 210.385454][ T297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.393563][ T297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.437296][ T297] team0 (unregistering): Port device team_slave_1 removed [ 210.448502][ T297] team0 (unregistering): Port device team_slave_0 removed