last executing test programs: 9m22.46706224s ago: executing program 32 (id=1044): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180300002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2e4c0, 0x1c9) statfs(&(0x7f0000000040)='./file0\x00', 0x0) name_to_handle_at(r1, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)=@fuse={0xc, 0x81, {0x1ff, 0x4, 0x6}}, &(0x7f0000000400), 0x1000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='qdisc_destroy\x00', r2, 0x0, 0x5}, 0x18) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f980000000c0a01010000000000000000010000000900020073797a32000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000050c00024000000000000000002c0001800a0001006c696d69740000001c0002800c00024000000000000000000c000140"], 0x11c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4}}]}, 0x2c}}, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_setup(0x1de1, &(0x7f0000000000)={0x0, 0x896d, 0x40, 0x2, 0x0, 0x0, r1}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x40095505, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000500)={0x1, 0x0, 0x3}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 7m8.039413873s ago: executing program 33 (id=3679): msgget(0x0, 0x284) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001800010000000000f8dbdf2102200008000000090000000008000100e000000206001c004e20000008000700e000000208000200ffffffff080001"], 0x4c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="df2500"/20, @ANYRES32=0x0, @ANYBLOB="00000000201200001400128009000100626f6e6400"], 0x34}}, 0x40800) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000e, 0x8010, r0, 0xb16b6000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000240)=""/163, 0xa3}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001"], 0x50}}, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000008680)=""/48) r3 = socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0xfdd6) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) 7m6.95927815s ago: executing program 0 (id=3698): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f00000010c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x4, 0x3}, {0x401, 0xfff}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000600)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}) 7m6.869609769s ago: executing program 3 (id=3699): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='bdi_dirty_ratelimit\x00', r2, 0x0, 0x4000}, 0x18) r3 = socket(0x1e, 0x2, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6, 0x0, 0xffffffff}, 0x10) connect$rxrpc(r3, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0), 0x1800}], 0x1}}], 0x1, 0x9200000000000000) recvmmsg(0xffffffffffffffff, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000", @ANYBLOB], 0x48) setrlimit(0x9, &(0x7f0000000000)) 7m6.814697279s ago: executing program 3 (id=3700): socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) getpid() socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x3, 0xffff, 0x0, 0x7ba, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffde9, &(0x7f00000028c0)={0x0}, 0x1, 0x0, 0x0, 0x4040090}, 0x800) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@nombcache}, {@quota}]}, 0x3, 0x43b, &(0x7f0000001c00)="$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") r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000040)=0x2, 0x4) sendto$inet6(r3, 0x0, 0x0, 0xfffffeffffff7fbf, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file2\x00', &(0x7f00000000c0), &(0x7f0000000540)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000200)=0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'}) personality(0x0) 7m6.814071819s ago: executing program 0 (id=3701): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8000}, 0x18) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) r1 = io_uring_setup(0x1893, &(0x7f0000000a00)={0x0, 0x7068, 0x1}) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000000300)={0x0}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x0, &(0x7f00000000c0)}) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 7m6.700177949s ago: executing program 0 (id=3702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x6}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x9, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}, {0xfffffffffffffc7f}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 7m6.663513768s ago: executing program 0 (id=3704): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', @random='\a\x00\x00 \x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x23}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x1, 0x3, 0x2001, 0x7}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000b002c", @ANYRES32=r3, @ANYRES16=r3, @ANYRESDEC=r3, @ANYRESOCT=0x0], 0xb4}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0xe2081, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000fddbdf60e33a3a349d8bd4be9fcb4f28c0b836baa33401db9b61dfba93509783103d10497fb70cf187721371a8006103a879675c967ed4c92e4aab4f10d0f3e5618e86dcd97b411767f09d48d5d8097e80ac78bbd9a7b9896a03bc29c437a93aaa75ea9b5bec62a45a4f59abed26ee8d8d33311c0c4de6b2388fa41a", @ANYRES32=r6, @ANYBLOB="0c0099000800000067000000050018013600000008002201240200000a0006000802110000010000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r0, @ANYRES64=r7], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r8, 0x26, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) move_mount(r7, &(0x7f00000000c0)='./file0\x00', r7, &(0x7f00000001c0)='./file0\x00', 0x100) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 7m6.590141698s ago: executing program 0 (id=3705): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 7m6.204086617s ago: executing program 0 (id=3706): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x1) get_mempolicy(0x0, 0x0, 0xf3b, &(0x7f0000003000/0x2000)=nil, 0x6) 7m6.186968107s ago: executing program 34 (id=3706): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x1) get_mempolicy(0x0, 0x0, 0xf3b, &(0x7f0000003000/0x2000)=nil, 0x6) 7m5.932826335s ago: executing program 3 (id=3711): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='qgroup_update_counters\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200020"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mmap_lock_acquire_returned\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000768000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x361800, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r5 = open(&(0x7f0000000000)='./file1\x00', 0x1c927e, 0xb4) fallocate(r5, 0x1, 0x0, 0x1001f0) 7m4.667937591s ago: executing program 3 (id=3731): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', @random='\a\x00\x00 \x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x23}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x1, 0x3, 0x2001, 0x7}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000b002c", @ANYRES32=r3, @ANYRES16=r3, @ANYRESDEC=r3, @ANYRESOCT=0x0], 0xb4}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0xe2081, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000fddbdf60e33a3a349d8bd4be9fcb4f28c0b836baa33401db9b61dfba93509783103d10497fb70cf187721371a8006103a879675c967ed4c92e4aab4f10d0f3e5618e86dcd97b411767f09d48d5d8097e80ac78bbd9a7b9896a03bc29c437a93aaa75ea9b5bec62a45a4f59abed26ee8d8d33311c0c4de6b2388fa41a", @ANYRES32=r6, @ANYBLOB="0c0099000800000067000000050018013600000008002201240200000a0006000802110000010000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r0, @ANYRES64=r7], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r8, 0x26, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 7m4.529253321s ago: executing program 3 (id=3736): socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) getpid() socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x3, 0xffff, 0x0, 0x7ba, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000cb9aeee879100000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffde9, &(0x7f00000028c0)={0x0}, 0x1, 0x0, 0x0, 0x4040090}, 0x800) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@nombcache}, {@quota}]}, 0x3, 0x43b, &(0x7f0000001c00)="$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") r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000040)=0x2, 0x4) sendto$inet6(r3, 0x0, 0x0, 0xfffffeffffff7fbf, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file2\x00', &(0x7f00000000c0), &(0x7f0000000540)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000200)=0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'}) personality(0x0) 7m4.32124144s ago: executing program 3 (id=3742): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x1765, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4800000000003}, 0x5002, 0x5dd8, 0x2, 0x2, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x22020600) syz_io_uring_submit(r2, r3, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) 7m4.29052559s ago: executing program 35 (id=3742): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x1765, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4800000000003}, 0x5002, 0x5dd8, 0x2, 0x2, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x22020600) syz_io_uring_submit(r2, r3, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) 5m2.900241578s ago: executing program 5 (id=5763): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="00020201"], 0x18) 5m2.865617827s ago: executing program 5 (id=5764): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x2}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x40) close(r0) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3c0, 0xe8, 0xe8, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x3, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x33}, @local, 0xff000000, 0x0, 0x2, 0x7, {@mac, {[0x101, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x1b96, 0x3, 0x2, 0x4, 0x1, 0x3, 'netpci0\x00', 'nicvf0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x80800) ioctl$MON_IOCT_RING_SIZE(r8, 0x9204, 0xf882b) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) r9 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x44, 0x842, 0x23456}) io_uring_enter(r9, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r9, 0x18, &(0x7f0000000580)={0x3, 0xffffffffffffffff, 0x2e, {0x4, 0x1}, 0x7}, 0x1) setsockopt$sock_attach_bpf(r5, 0x1, 0x1b, &(0x7f00000002c0), 0x4) r12 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r12, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002305e20000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='ext4_alloc_da_blocks\x00', r4, 0x0, 0xe000}, 0x18) 5m1.169891362s ago: executing program 5 (id=5776): syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9b}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 4m58.124262631s ago: executing program 5 (id=5801): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0xa, 0x0, 0x1, 'queue1\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ppoll(&(0x7f00000000c0)=[{r0, 0xa223}, {0xffffffffffffffff, 0x4}], 0x2, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r6) r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r7, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r9, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r8}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r7, 0x0, 0x0, 0xffffffffffffffff}]) 4m57.87945421s ago: executing program 5 (id=5807): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@appraise}, {@obj_role={'obj_role', 0x3d, 'autofs\x00'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@fsname}, {@permit_directio}, {@context={'context', 0x3d, 'root'}}]}, 0x1, 0x53e, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="2f000008000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x5, &(0x7f0000000040)=[{0x5, 0x1, 0xfa, 0xc581}, {0x2d, 0x4, 0x7, 0x6794}, {0x8, 0x3, 0xfe, 0x2}, {0xfff9, 0x94, 0x75, 0x400}, {0x401, 0x7, 0x9, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) 4m57.607851179s ago: executing program 5 (id=5808): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 4m57.607632289s ago: executing program 36 (id=5808): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 1m8.952205961s ago: executing program 6 (id=9301): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095565761e6a557ef94e65e79a5b810af025d7bb6a42bd130c805fd0d1e08b4b42a803e3fcf8f6d97df40ad1e4daf7a156da3bcccefa26cfac87da596259a49828eabed74ef822ead95840e0a30c10ecc7c9489714875fee3e194769834cf0c7309c0f9bb288bddc66814691c1a952b9be4dfcfa0c9a6e5aeb06ab7e1960c8a4abbb43dd0075b9158ef8415d43157da0eccc57dae6394109557e9c53ebc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x800100, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 1m8.92017798s ago: executing program 6 (id=9302): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x891f, &(0x7f0000000040)="e8080c9b388c3a") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x891b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ext4_update_sb\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) socket$igmp6(0xa, 0x3, 0x2) 1m8.88635226s ago: executing program 6 (id=9303): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x820000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) 1m8.811683981s ago: executing program 6 (id=9307): openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") r0 = creat(&(0x7f0000000340)='./bus\x00', 0x1c) r1 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x10, 0x3, 0x9, 0xd, 0x0, 0x2, 0x40004, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x6, 0xfffffffffffffe00}, 0x10e, 0xfff, 0x274, 0x7, 0x0, 0x16, 0x91, 0x0, 0x1, 0x0, 0x800}, r1, 0xc, r0, 0x3) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) iopl(0x3) r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x80000000, 0x0, 0x20001}, 0x0, 0x0, r3, 0x3) poll(&(0x7f0000000640)=[{r4, 0x8200}], 0x1, 0x4000040) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002"], 0x310) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000001320207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union, @enum64={0x7, 0x5, 0x0, 0x13, 0x0, 0x7, [{0x10, 0x100, 0x9}, {0x3, 0x4, 0x5}, {0x7, 0x6, 0xa}, {0x3, 0x1ff, 0x1ff}, {0xb, 0x4, 0x44}]}, @func_proto]}}, &(0x7f0000000f40)=""/4089, 0x86, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5319c980", @ANYRES16=r9, @ANYBLOB="010700000000000000000b000000"], 0x14}, 0x1, 0x0, 0x0, 0x24044004}, 0x4000) semget$private(0x0, 0x6, 0x0) 1m7.845889047s ago: executing program 6 (id=9327): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xfffffffb}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x81) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r6, 0x0, 0x33fe0, 0x0) 1m6.407752431s ago: executing program 6 (id=9338): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev, @remote, @remote, @local}}}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000e40)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x1000, 0x0, 0x1}}}}}}, 0x0) 1m6.332729341s ago: executing program 37 (id=9338): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev, @remote, @remote, @local}}}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000e40)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x1000, 0x0, 0x1}}}}}}, 0x0) 1m1.995773117s ago: executing program 9 (id=9389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x8, 0x0, 0x2}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 1m1.837541006s ago: executing program 9 (id=9392): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x286c188, 0x0, 0xff, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x0, 0x2, 0x6, 0x20800, r3, 0x7, '\x00', 0x0, r3, 0x2, 0xfffffffe, 0x82, 0x6, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r5}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 1m1.137118615s ago: executing program 9 (id=9395): r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) pwritev(r0, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000200)={{0x2, 0x4e21, @rand_addr=0x64010102}, {0x6, @remote}, 0x60, {0x2, 0x4e21, @local}, 'veth0_to_bridge\x00'}) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000006380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000014"], 0x30}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m0.684591903s ago: executing program 9 (id=9404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0xa3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fstatfs(r1, &(0x7f0000000700)=""/13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000080000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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") 59.9762114s ago: executing program 9 (id=9414): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000fc0)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0xe, 0x0, "8d39f8d0f17652ba77103989fbbffcc97ca956eb5ae31ec4d279b3247785f68cbdd38506d558b8c2279c4d9ac190f3b33053fc70e66825b4f195f4c5465cfb5fd929f46cb06d8c822f7df85b135a1b3c"}, 0xd8) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x8001, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) 59.580283748s ago: executing program 9 (id=9424): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x20, 0x3, 0x9, 0x1000, 0x0, 0xfffffffe, 0x0}) syz_emit_ethernet(0x80, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x4a, 0x2f, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x9fe0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xfc1a]}, {}, {0xa888, 0x88be, 0x3}}}}}}}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req={0x9, 0x1, 0x6}, 0x10) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) unshare(0x22020600) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 59.562187738s ago: executing program 38 (id=9424): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x20, 0x3, 0x9, 0x1000, 0x0, 0xfffffffe, 0x0}) syz_emit_ethernet(0x80, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x4a, 0x2f, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x9fe0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xfc1a]}, {}, {0xa888, 0x88be, 0x3}}}}}}}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req={0x9, 0x1, 0x6}, 0x10) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) unshare(0x22020600) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 6.451750642s ago: executing program 8 (id=9992): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.8528967s ago: executing program 4 (id=9999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x0) 5.73750255s ago: executing program 4 (id=10001): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000f14010000000000000000000d0045"], 0x20}, 0x1, 0x0, 0x0, 0xdb4ce876ffba1343}, 0x20040004) 5.655900819s ago: executing program 2 (id=10002): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/175, 0xaf}], 0x1, 0x0, 0xffffffffffffff22}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}}], 0x2, 0x0, 0x0) close(r1) getsockname$packet(r1, &(0x7f0000000100), &(0x7f00000001c0)=0x14) msync(&(0x7f0000952000/0x3000)=nil, 0x3000, 0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0213400002"], 0x10}}, 0x0) 5.655554999s ago: executing program 7 (id=10003): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(r0, 0xffffffffffffffff, 0x2) signalfd(r1, &(0x7f00000001c0)={[0x9]}, 0x8) 5.624443369s ago: executing program 4 (id=10005): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@appraise}, {@obj_role={'obj_role', 0x3d, 'autofs\x00'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@fsname}, {@permit_directio}, {@context={'context', 0x3d, 'root'}}]}, 0x1, 0x53e, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="2f000008000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{0x5, 0x1, 0xfa, 0xc581}, {0x2d, 0x4, 0x7, 0x6794}, {0x8, 0x3, 0xfe, 0x2}, {0x401, 0x7, 0x9, 0x8}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9a41, 0x0) writev(r6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'xfrm0\x00', @local}) unshare(0x62040200) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf199ba549e6d28bb, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 5.621950779s ago: executing program 8 (id=10006): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xa8}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf2ff}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008020}, 0x800) 5.586374289s ago: executing program 7 (id=10007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0xa, 0x2400000001, 0x0) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xfb2, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x11a, 0x3, &(0x7f0000000100)=0xffffffff, 0x4) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) write$binfmt_elf64(r4, &(0x7f0000001180)={{0x7f, 0x45, 0x4c, 0x46, 0x21, 0x9, 0x8, 0x8b, 0x7, 0x3, 0x6, 0xe57, 0x207, 0x40, 0x47, 0x6, 0x0, 0x38, 0x2, 0x4, 0x3, 0x5}, [{0x4, 0x4, 0x80000000, 0x7, 0x0, 0x8, 0x9, 0xa52}, {0x60000000, 0xfb, 0x1, 0x9, 0x1, 0xa, 0x0, 0xeda}], "fbcf18136c79bf4ee9c553dbf3a2ec0e1c3d18642d906334f558e4626f70e971bba12ead59c8eef486168b03c4def367", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7e0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r7], 0x3c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000008c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES8=r2], 0x0, 0xc, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) 5.443817239s ago: executing program 8 (id=10009): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) 4.475258376s ago: executing program 8 (id=10010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) dup2(r2, r2) 4.474752005s ago: executing program 2 (id=10011): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000fc0)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0xe, 0x0, "8d39f8d0f17652ba77103989fbbffcc97ca956eb5ae31ec4d279b3247785f68cbdd38506d558b8c2279c4d9ac190f3b33053fc70e66825b4f195f4c5465cfb5fd929f46cb06d8c822f7df85b135a1b3c"}, 0xd8) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x8001, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) 3.445495942s ago: executing program 4 (id=10012): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r3 = io_uring_setup(0x5b77, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x400000, 0x200133}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x201000, 0x1000}, 0x20) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1}, 0x10) r8 = socket$inet6(0xa, 0x1, 0x1) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty, 0x10001}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001ac0)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) 3.445330432s ago: executing program 8 (id=10013): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x82) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 3.03215282s ago: executing program 8 (id=10015): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 2.8819808s ago: executing program 7 (id=10016): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000f14010000000000000000000d0045"], 0x20}, 0x1, 0x0, 0x0, 0xdb4ce876ffba1343}, 0x20040004) 2.473739348s ago: executing program 7 (id=10020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a", 0xd2}], 0x1}, 0x0) 2.441783388s ago: executing program 2 (id=10021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) 2.429873338s ago: executing program 7 (id=10022): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.376155048s ago: executing program 2 (id=10023): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@appraise}, {@obj_role={'obj_role', 0x3d, 'autofs\x00'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@fsname}, {@permit_directio}, {@context={'context', 0x3d, 'root'}}]}, 0x1, 0x53e, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="2f000008000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{0x5, 0x1, 0xfa, 0xc581}, {0x2d, 0x4, 0x7, 0x6794}, {0x8, 0x3, 0xfe, 0x2}, {0x401, 0x7, 0x9, 0x8}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9a41, 0x0) writev(r6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'xfrm0\x00', @local}) unshare(0x62040200) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf199ba549e6d28bb, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 797.088203ms ago: executing program 1 (id=10026): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x286c188, 0x0, 0xff, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x0, 0x2, 0x6, 0x20800, r3, 0x7, '\x00', 0x0, r3, 0x2, 0xfffffffe, 0x82, 0x6, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 792.914472ms ago: executing program 2 (id=10027): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) 748.598123ms ago: executing program 2 (id=10028): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf4bacd807155f826d105494dc43f31bafa2f2e2f91e05d4059c5ce1090bda131e6bd96f9c22ce40ba5e48cd57cd47cff2c25fd6d1a09371d3b67bfdaac4e3f47cba15ab2af2753a1575eab7bc5b1030600af", 0x86}], 0x1) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x1, 0x23, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002e8000/0x2000)=nil, 0x2000, 0xf) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='thermal_power_devfreq_get_power\x00', r5}, 0x18) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101281, 0x4, 0x0, 0x9, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe8000000000000000000000000000bbff01000000000000000000000000000100000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0x1a0}}, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r6, 0x40095505, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x4, 0x6}, {0x3, 0x5}], 0x2, &(0x7f0000000040)={0x0, 0x3938700}) 687.593242ms ago: executing program 4 (id=10029): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="17000000000000000400000003040000000000003b400ae7485afea3721e48302f8f3b8af0e21dc98b8d9158c4966c0f1556bf1364c9b9f6496cfeb35e70029d0f07b2e97ff4222c92bac812b7f409609fefcfcc41d13e7f92bc6f15037ff36204628a92f98f5f2bc9c79578f0e0ff566643458b4e72065255b5322500"/143, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000780)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x18) clock_adjtime(0x3, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r10 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r10, &(0x7f0000000140)='./file0\x00') openat(r10, 0x0, 0x515a02, 0x52abe154ad664f64) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r11, r11, 0x0, 0xfffe80) 558.244842ms ago: executing program 1 (id=10030): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 503.263732ms ago: executing program 1 (id=10031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0xa, 0x2400000001, 0x0) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xfb2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r5, 0x11a, 0x3, &(0x7f0000000100)=0xffffffff, 0x4) socket$unix(0x1, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) write$binfmt_elf64(r4, &(0x7f0000001180)={{0x7f, 0x45, 0x4c, 0x46, 0x21, 0x9, 0x8, 0x8b, 0x7, 0x3, 0x6, 0xe57, 0x207, 0x40, 0x47, 0x6, 0x0, 0x38, 0x2, 0x4, 0x3, 0x5}, [{0x4, 0x4, 0x80000000, 0x7, 0x0, 0x8, 0x9, 0xa52}, {0x60000000, 0xfb, 0x1, 0x9, 0x1, 0xa, 0x0, 0xeda}], "fbcf18136c79bf4ee9c553dbf3a2ec0e1c3d18642d906334f558e4626f70e971bba12ead59c8eef486168b03c4def367", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7e0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32], 0x3c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000008c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES8=r2], 0x0, 0xc, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) 262.618471ms ago: executing program 7 (id=10032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0xa, 0x2400000001, 0x0) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xfb2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r5, 0x11a, 0x3, &(0x7f0000000100)=0xffffffff, 0x4) socket$unix(0x1, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) write$binfmt_elf64(r4, &(0x7f0000001180)={{0x7f, 0x45, 0x4c, 0x46, 0x21, 0x9, 0x8, 0x8b, 0x7, 0x3, 0x6, 0xe57, 0x207, 0x40, 0x47, 0x6, 0x0, 0x38, 0x2, 0x4, 0x3, 0x5}, [{0x4, 0x4, 0x80000000, 0x7, 0x0, 0x8, 0x9, 0xa52}, {0x60000000, 0xfb, 0x1, 0x9, 0x1, 0xa, 0x0, 0xeda}], "fbcf18136c79bf4ee9c553dbf3a2ec0e1c3d18642d906334f558e4626f70e971bba12ead59c8eef486168b03c4def367", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7e0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32], 0x3c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000008c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES8=r2], 0x0, 0xc, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) 181.97329ms ago: executing program 1 (id=10033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a", 0xd2}], 0x1}, 0x0) 131.85997ms ago: executing program 1 (id=10034): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000f14010000000000000000000d0045"], 0x20}, 0x1, 0x0, 0x0, 0xdb4ce876ffba1343}, 0x20040004) 70.81839ms ago: executing program 1 (id=10035): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@appraise}, {@obj_role={'obj_role', 0x3d, 'autofs\x00'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@fsname}, {@permit_directio}, {@context={'context', 0x3d, 'root'}}]}, 0x1, 0x53e, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="2f000008000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9a41, 0x0) writev(r6, 0x0, 0x0) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000007c0), &(0x7f00000001c0)=0x8) socket(0xa, 0x1, 0x0) 0s ago: executing program 4 (id=10036): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) kernel console output (not intermixed with test programs): etdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.242449][T29091] loop8: detected capacity change from 0 to 128 [ 600.306312][T29101] loop1: detected capacity change from 0 to 128 [ 600.333598][T29103] loop4: detected capacity change from 0 to 1024 [ 600.351963][T29103] ext4: Unknown parameter 'appraise' [ 600.352134][T29101] syz.1.9512: attempt to access beyond end of device [ 600.352134][T29101] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 600.568434][T22956] tipc: Node number set to 2886997007 [ 600.588188][T29118] lo speed is unknown, defaulting to 1000 [ 600.640806][T29118] lo speed is unknown, defaulting to 1000 [ 600.714234][T29118] lo speed is unknown, defaulting to 1000 [ 600.765977][T29118] lo speed is unknown, defaulting to 1000 [ 601.226169][T29124] loop4: detected capacity change from 0 to 512 [ 601.245983][T29124] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 601.257663][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 601.257679][ T29] audit: type=1400 audit(1737678940.397:49988): avc: denied { map_create } for pid=29125 comm="syz.1.9521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 601.283455][ T29] audit: type=1400 audit(1737678940.397:49989): avc: denied { map_read map_write } for pid=29125 comm="syz.1.9521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 601.303549][ T29] audit: type=1400 audit(1737678940.397:49990): avc: denied { perfmon } for pid=29125 comm="syz.1.9521" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 601.340884][ T29] audit: type=1400 audit(1737678940.467:49991): avc: denied { prog_run } for pid=29125 comm="syz.1.9521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 601.360185][ T29] audit: type=1400 audit(1737678940.477:49992): avc: denied { open } for pid=29125 comm="syz.1.9521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 601.379633][ T29] audit: type=1400 audit(1737678940.477:49993): avc: denied { kernel } for pid=29125 comm="syz.1.9521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 601.416035][T29124] EXT4-fs (loop4): 1 truncate cleaned up [ 601.434661][T29124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.452961][ T29] audit: type=1400 audit(1737678940.587:49994): avc: denied { recv } for pid=29119 comm="syz.4.9426" saddr=10.128.0.163 src=30030 daddr=10.128.0.246 dest=56910 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 601.523060][T29124] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 601.547981][T29131] loop2: detected capacity change from 0 to 128 [ 601.548260][ T29] audit: type=1400 audit(1737678940.637:49995): avc: denied { egress } for pid=3373 comm="kworker/1:3" saddr=fe80::1c daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 601.578290][ T29] audit: type=1400 audit(1737678940.637:49996): avc: denied { sendto } for pid=3373 comm="kworker/1:3" saddr=fe80::1c daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 601.601996][ T29] audit: type=1400 audit(1737678940.647:49997): avc: denied { mount } for pid=29123 comm="syz.4.9520" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 601.717952][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.725409][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.732898][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.744119][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.751614][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.759127][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.766561][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.774072][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.781562][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.781742][T29139] loop8: detected capacity change from 0 to 1024 [ 601.789020][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.802802][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.810262][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.817749][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.825179][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.832957][T29141] FAULT_INJECTION: forcing a failure. [ 601.832957][T29141] name failslab, interval 1, probability 0, space 0, times 0 [ 601.834301][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.845719][T29141] CPU: 1 UID: 0 PID: 29141 Comm: syz.1.9527 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 601.845753][T29141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 601.845829][T29141] Call Trace: [ 601.845911][T29141] [ 601.845922][T29141] dump_stack_lvl+0xf2/0x150 [ 601.846005][T29141] dump_stack+0x15/0x1a [ 601.846025][T29141] should_fail_ex+0x223/0x230 [ 601.846059][T29141] should_failslab+0x8f/0xb0 [ 601.846084][T29141] kmem_cache_alloc_noprof+0x52/0x320 [ 601.846187][T29141] ? getname_flags+0x81/0x3b0 [ 601.846217][T29141] getname_flags+0x81/0x3b0 [ 601.846314][T29141] __x64_sys_unlink+0x21/0x40 [ 601.846395][T29141] x64_sys_call+0x2329/0x2dc0 [ 601.846422][T29141] do_syscall_64+0xc9/0x1c0 [ 601.846542][T29141] ? clear_bhb_loop+0x55/0xb0 [ 601.846568][T29141] ? clear_bhb_loop+0x55/0xb0 [ 601.846592][T29141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.846698][T29141] RIP: 0033:0x7fd12c51cd29 [ 601.846718][T29141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.846741][T29141] RSP: 002b:00007fd12ab81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 601.846764][T29141] RAX: ffffffffffffffda RBX: 00007fd12c735fa0 RCX: 00007fd12c51cd29 [ 601.846808][T29141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 601.846823][T29141] RBP: 00007fd12ab81090 R08: 0000000000000000 R09: 0000000000000000 [ 601.846839][T29141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.846854][T29141] R13: 0000000000000000 R14: 00007fd12c735fa0 R15: 00007ffe04ffce08 [ 601.846877][T29141] [ 601.852919][T29139] EXT4-fs error (device loop8): ext4_acquire_dquot:6924: comm syz.8.9526: Failed to acquire dquot type 0 [ 601.853147][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.866238][T29139] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, [ 601.873616][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.876852][T29139] inode 13: [ 601.879796][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.879825][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.884411][T29139] block 144: [ 601.888580][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.893226][T29139] freeing already freed block (bit 9); block bitmap corrupt. [ 601.897835][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.922109][T29139] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #13: comm syz.8.9526: corrupted inode contents [ 601.926333][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.926358][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.926402][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.933514][T29139] EXT4-fs error (device loop8): ext4_dirty_inode:6042: inode #13: comm syz.8.9526: mark_inode_dirty error [ 601.935778][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 601.999381][T29139] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #13: comm syz.8.9526: corrupted inode contents [ 602.003041][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 602.014369][T29139] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #13: comm syz.8.9526: mark_inode_dirty error [ 602.019014][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 602.024122][T29139] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #13: comm syz.8.9526: corrupted inode contents [ 602.033323][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 602.043886][T29139] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 602.048281][ T1096] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 602.052601][ T1096] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 602.059005][T29139] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #13: comm syz.8.9526: corrupted inode contents [ 602.254596][T29139] EXT4-fs error (device loop8): ext4_truncate:4240: inode #13: comm syz.8.9526: mark_inode_dirty error [ 602.254809][T28831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.266098][T29139] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 602.284343][T29139] EXT4-fs (loop8): 1 truncate cleaned up [ 602.290425][T29139] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.327750][T29149] SELinux: policydb version 0 does not match my version range 15-34 [ 602.337977][T29149] SELinux: failed to load policy [ 602.343819][T21443] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.403510][T29157] loop4: detected capacity change from 0 to 128 [ 602.452199][T29163] loop4: detected capacity change from 0 to 1024 [ 602.453924][T29165] loop8: detected capacity change from 0 to 512 [ 602.459085][T29163] ext4: Unknown parameter 'appraise' [ 602.553950][T29174] loop1: detected capacity change from 0 to 1024 [ 602.567599][T29174] ext4: Unknown parameter 'appraise' [ 602.586660][T29165] EXT4-fs (loop8): 1 orphan inode deleted [ 602.596334][T29165] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.609201][T29165] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.621917][T11195] EXT4-fs error (device loop8): ext4_release_dquot:6947: comm kworker/u8:31: Failed to release dquot type 1 [ 602.699788][T29178] lo speed is unknown, defaulting to 1000 [ 602.733154][T29178] lo speed is unknown, defaulting to 1000 [ 603.419324][T29180] lo speed is unknown, defaulting to 1000 [ 603.455976][T29180] lo speed is unknown, defaulting to 1000 [ 603.701309][T29178] lo speed is unknown, defaulting to 1000 [ 603.843290][T21443] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.877802][T29178] lo speed is unknown, defaulting to 1000 [ 604.070439][T29180] lo speed is unknown, defaulting to 1000 [ 604.302721][T29180] lo speed is unknown, defaulting to 1000 [ 604.573673][T29186] loop2: detected capacity change from 0 to 128 [ 604.596426][T29188] SELinux: policydb version 0 does not match my version range 15-34 [ 604.940674][T29188] SELinux: failed to load policy [ 604.946833][T29190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9544'. [ 605.083426][T29197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9546'. [ 605.092440][T29197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9546'. [ 605.138704][T29203] loop2: detected capacity change from 0 to 128 [ 605.168218][T29208] netlink: 'syz.4.9547': attribute type 21 has an invalid length. [ 605.258928][T29208] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9547'. [ 605.375444][T29221] loop1: detected capacity change from 0 to 1024 [ 605.387940][T29221] ext4: Unknown parameter 'appraise' [ 605.407483][T29225] loop2: detected capacity change from 0 to 1024 [ 605.494236][T29225] ext4: Unknown parameter 'appraise' [ 605.508183][T29214] lo speed is unknown, defaulting to 1000 [ 605.657630][T29227] lo speed is unknown, defaulting to 1000 [ 605.686818][T29229] SELinux: policydb version 0 does not match my version range 15-34 [ 605.721340][T29230] lo speed is unknown, defaulting to 1000 [ 605.991088][T29227] lo speed is unknown, defaulting to 1000 [ 606.090137][T29230] lo speed is unknown, defaulting to 1000 [ 606.406254][T29229] SELinux: failed to load policy [ 606.426528][T29214] lo speed is unknown, defaulting to 1000 [ 607.069904][T29235] lo speed is unknown, defaulting to 1000 [ 607.103773][T29235] lo speed is unknown, defaulting to 1000 [ 607.301954][T29239] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9559'. [ 607.389272][T29244] loop1: detected capacity change from 0 to 128 [ 607.491490][T29252] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9564'. [ 607.500471][T29252] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9564'. [ 607.589658][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 607.589672][ T29] audit: type=1326 audit(1737678946.727:50128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.4.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 607.619618][ T29] audit: type=1326 audit(1737678946.727:50129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.4.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 607.706095][T29259] loop4: detected capacity change from 0 to 512 [ 607.740182][T29259] EXT4-fs: Ignoring removed oldalloc option [ 607.777508][T29263] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 607.807274][T29259] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.9567: Parent and EA inode have the same ino 15 [ 607.826689][T29272] loop2: detected capacity change from 0 to 128 [ 607.888705][T29259] EXT4-fs (loop4): Remounting filesystem read-only [ 607.895336][T29259] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 607.930160][ T29] audit: type=1326 audit(1737678946.777:50130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.4.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 607.953879][ T29] audit: type=1326 audit(1737678946.777:50131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.4.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 607.977544][ T29] audit: type=1326 audit(1737678946.777:50132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.4.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 608.001439][ T29] audit: type=1326 audit(1737678946.817:50133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.4.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 608.025118][ T29] audit: type=1326 audit(1737678946.817:50134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.4.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 608.048878][ T29] audit: type=1326 audit(1737678946.817:50135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.4.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 608.072590][ T29] audit: type=1326 audit(1737678946.817:50136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.4.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 608.096267][ T29] audit: type=1326 audit(1737678946.817:50137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29258 comm="syz.4.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 608.099421][T29259] EXT4-fs (loop4): 1 orphan inode deleted [ 608.164848][T29259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.190089][T29259] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 608.208252][T29259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.239596][T29263] infiniband syz!: set down [ 608.244252][T29263] infiniband syz!: added team_slave_0 [ 608.293694][T29263] RDS/IB: syz!: added [ 608.293849][T29289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9576'. [ 608.297863][T29263] smc: adding ib device syz! with port count 1 [ 608.313254][T29263] smc: ib device syz! port 1 has pnetid [ 608.479994][T29278] lo speed is unknown, defaulting to 1000 [ 608.487895][T29297] loop4: detected capacity change from 0 to 128 [ 608.543031][T29297] syz.4.9578: attempt to access beyond end of device [ 608.543031][T29297] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 608.962781][T29308] netlink: 268 bytes leftover after parsing attributes in process `syz.7.9583'. [ 609.015098][T29308] loop7: detected capacity change from 0 to 512 [ 609.051756][T29308] EXT4-fs (loop7): 1 orphan inode deleted [ 609.058930][T29308] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.071790][T29308] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.075365][T11195] EXT4-fs error (device loop7): ext4_release_dquot:6947: comm kworker/u8:31: Failed to release dquot type 1 [ 609.111355][T22561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.134611][T29312] loop7: detected capacity change from 0 to 1024 [ 609.141241][T29312] ext4: Unknown parameter 'appraise' [ 609.297885][T29278] lo speed is unknown, defaulting to 1000 [ 609.298031][T29316] loop2: detected capacity change from 0 to 128 [ 609.415051][T29318] lo speed is unknown, defaulting to 1000 [ 609.478759][T29318] lo speed is unknown, defaulting to 1000 [ 609.833183][T29321] loop2: detected capacity change from 0 to 512 [ 609.857509][T29321] EXT4-fs: Ignoring removed oldalloc option [ 609.899371][T29321] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.9587: Parent and EA inode have the same ino 15 [ 609.938036][T29321] EXT4-fs (loop2): Remounting filesystem read-only [ 609.944625][T29321] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 610.045815][T29330] loop4: detected capacity change from 0 to 512 [ 610.071186][T29330] EXT4-fs: Ignoring removed oldalloc option [ 610.077353][T29321] EXT4-fs (loop2): 1 orphan inode deleted [ 610.097976][T29321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.123700][T29330] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.9591: Parent and EA inode have the same ino 15 [ 610.156421][T29321] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 610.175360][T29330] EXT4-fs (loop4): Remounting filesystem read-only [ 610.182010][T29330] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 610.198738][T29321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.227982][T29330] EXT4-fs (loop4): 1 orphan inode deleted [ 610.244345][T29330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.273093][T29330] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 610.287063][T29330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.345001][T29278] chnl_net:caif_netlink_parms(): no params data found [ 610.484953][T29344] loop4: detected capacity change from 0 to 128 [ 610.498079][T29342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9595'. [ 610.646760][T29348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9598'. [ 610.648136][T29346] loop4: detected capacity change from 0 to 1024 [ 610.656544][T29348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9598'. [ 610.679821][T29346] EXT4-fs error (device loop4): ext4_acquire_dquot:6924: comm syz.4.9597: Failed to acquire dquot type 0 [ 610.710510][T29346] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 610.737699][T29346] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #13: comm syz.4.9597: corrupted inode contents [ 610.760490][T29278] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.767676][T29278] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.775060][T29278] bridge_slave_0: entered allmulticast mode [ 610.781910][T29278] bridge_slave_0: entered promiscuous mode [ 610.793333][T29278] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.799557][T29346] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #13: comm syz.4.9597: mark_inode_dirty error [ 610.800424][T29278] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.819242][T29278] bridge_slave_1: entered allmulticast mode [ 610.826611][T29278] bridge_slave_1: entered promiscuous mode [ 610.827903][T29346] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #13: comm syz.4.9597: corrupted inode contents [ 610.849492][T29346] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.9597: mark_inode_dirty error [ 610.884935][T29278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.895681][T29346] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #13: comm syz.4.9597: corrupted inode contents [ 610.910096][T29357] lo speed is unknown, defaulting to 1000 [ 610.913744][T29278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.917972][T29346] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 610.953960][T29346] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #13: comm syz.4.9597: corrupted inode contents [ 610.978455][T29346] EXT4-fs error (device loop4): ext4_truncate:4240: inode #13: comm syz.4.9597: mark_inode_dirty error [ 610.992116][T29346] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 610.994908][T29278] team0: Port device team_slave_0 added [ 611.001562][T29346] EXT4-fs (loop4): 1 truncate cleaned up [ 611.008475][T29278] team0: Port device team_slave_1 added [ 611.020220][T29346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.033221][T29357] lo speed is unknown, defaulting to 1000 [ 611.089720][T29278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.096831][T29278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.122985][T29278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.136954][T29278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.137799][T28831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.144056][T29278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.179204][T29278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.243541][T29365] loop7: detected capacity change from 0 to 512 [ 611.251089][T29365] EXT4-fs: Ignoring removed oldalloc option [ 611.261475][T29365] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.9604: Parent and EA inode have the same ino 15 [ 611.276601][T29365] EXT4-fs (loop7): Remounting filesystem read-only [ 611.283251][T29365] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 611.297518][T29365] EXT4-fs (loop7): 1 orphan inode deleted [ 611.303867][T29365] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.318889][T29365] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 611.335533][T29278] hsr_slave_0: entered promiscuous mode [ 611.338176][T29365] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.344082][T29369] loop8: detected capacity change from 0 to 512 [ 611.357500][T29278] hsr_slave_1: entered promiscuous mode [ 611.372611][T29278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 611.381760][T29369] EXT4-fs: Ignoring removed oldalloc option [ 611.388247][T29278] Cannot create hsr debugfs directory [ 611.393788][T29363] netlink: 'syz.4.9603': attribute type 21 has an invalid length. [ 611.403224][T29363] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9603'. [ 611.403825][T29369] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.9605: Parent and EA inode have the same ino 15 [ 611.412359][T29363] netlink: 'syz.4.9603': attribute type 1 has an invalid length. [ 611.447844][T29369] EXT4-fs (loop8): Remounting filesystem read-only [ 611.454521][T29369] EXT4-fs warning (device loop8): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 611.503026][T29369] EXT4-fs (loop8): 1 orphan inode deleted [ 611.525042][T29369] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.545604][T29369] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 611.578972][T29381] loop7: detected capacity change from 0 to 128 [ 611.617172][T29369] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.656836][T29383] loop2: detected capacity change from 0 to 512 [ 611.665811][T29388] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9611'. [ 611.666603][T29383] EXT4-fs: Ignoring removed oldalloc option [ 611.682123][T29278] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.706656][T29383] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.9608: Parent and EA inode have the same ino 15 [ 611.742999][T29383] EXT4-fs (loop2): Remounting filesystem read-only [ 611.749615][T29383] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 611.779890][T29278] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.793797][T29383] EXT4-fs (loop2): 1 orphan inode deleted [ 611.808028][T29383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.846132][T29383] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 611.859922][T29383] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.878661][T29278] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.938787][T29278] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.954125][T29403] loop4: detected capacity change from 0 to 512 [ 611.968231][T29403] EXT4-fs: Ignoring removed oldalloc option [ 611.991453][T29403] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.9616: Parent and EA inode have the same ino 15 [ 612.017083][T29403] EXT4-fs (loop4): Remounting filesystem read-only [ 612.023761][T29403] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 612.033880][T29403] EXT4-fs (loop4): 1 orphan inode deleted [ 612.040124][T29403] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 612.058315][T29407] lo speed is unknown, defaulting to 1000 [ 612.092719][T29407] lo speed is unknown, defaulting to 1000 [ 612.120469][T29278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 612.144014][T29278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 612.160374][T29278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 612.199568][T29278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 612.242211][T29412] netlink: 'syz.7.9619': attribute type 21 has an invalid length. [ 612.262744][T29412] netlink: 132 bytes leftover after parsing attributes in process `syz.7.9619'. [ 612.272298][T29412] netlink: 'syz.7.9619': attribute type 1 has an invalid length. [ 612.373023][T29278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.381305][T29416] netlink: 268 bytes leftover after parsing attributes in process `syz.7.9621'. [ 612.393706][T29416] loop7: detected capacity change from 0 to 512 [ 612.422947][T29416] EXT4-fs (loop7): 1 orphan inode deleted [ 612.424393][T29278] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.438832][T11181] EXT4-fs error (device loop7): ext4_release_dquot:6947: comm kworker/u8:17: Failed to release dquot type 1 [ 612.454347][T29418] loop2: detected capacity change from 0 to 512 [ 612.455059][T29278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 612.467005][T29422] loop4: detected capacity change from 0 to 1024 [ 612.471287][T29278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 612.488460][T29416] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.498900][T29418] EXT4-fs: Ignoring removed oldalloc option [ 612.499348][T29422] ext4: Unknown parameter 'appraise' [ 612.506695][T11188] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.517325][T11188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.602438][T29418] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.9622: Parent and EA inode have the same ino 15 [ 612.623409][T11188] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.630517][T11188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.641831][T29418] EXT4-fs (loop2): Remounting filesystem read-only [ 612.648592][T29418] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 612.681116][T29418] EXT4-fs (loop2): 1 orphan inode deleted [ 612.687215][T29418] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 612.770668][T29428] lo speed is unknown, defaulting to 1000 [ 612.840107][T29428] lo speed is unknown, defaulting to 1000 [ 613.303251][T29278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.326362][ T29] kauditd_printk_skb: 518 callbacks suppressed [ 613.326377][ T29] audit: type=1326 audit(1737678952.457:50652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29434 comm="syz.4.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 613.356373][ T29] audit: type=1326 audit(1737678952.457:50653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29434 comm="syz.4.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 613.380146][ T29] audit: type=1326 audit(1737678952.457:50654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29434 comm="syz.4.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 613.403797][ T29] audit: type=1326 audit(1737678952.457:50655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29434 comm="syz.4.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 613.427567][ T29] audit: type=1326 audit(1737678952.457:50656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29434 comm="syz.4.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa214a8ec47 code=0x7ffc0000 [ 613.451223][ T29] audit: type=1326 audit(1737678952.457:50657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29434 comm="syz.4.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa214a8ebbc code=0x7ffc0000 [ 613.474800][ T29] audit: type=1326 audit(1737678952.457:50658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29434 comm="syz.4.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa214a8eaf4 code=0x7ffc0000 [ 613.498588][ T29] audit: type=1326 audit(1737678952.457:50659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29434 comm="syz.4.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa214a8eaf4 code=0x7ffc0000 [ 613.522258][ T29] audit: type=1326 audit(1737678952.457:50660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29434 comm="syz.4.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa214a8b98a code=0x7ffc0000 [ 613.810330][T29441] loop4: detected capacity change from 0 to 1024 [ 613.838037][T29441] ext4: Unknown parameter 'appraise' [ 613.893710][T29445] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 613.895191][ T29] audit: type=1326 audit(1737678952.697:50661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29434 comm="syz.4.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 613.964151][T29445] vhci_hcd: invalid port number 23 [ 614.077739][T29450] loop8: detected capacity change from 0 to 512 [ 614.125745][T29450] EXT4-fs: Ignoring removed oldalloc option [ 614.156742][T29459] lo speed is unknown, defaulting to 1000 [ 614.210995][T29459] lo speed is unknown, defaulting to 1000 [ 614.433608][T29459] lo speed is unknown, defaulting to 1000 [ 614.484256][T29459] lo speed is unknown, defaulting to 1000 [ 615.086608][T29278] veth0_vlan: entered promiscuous mode [ 615.219283][T29450] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.9629: Parent and EA inode have the same ino 15 [ 615.249449][T29450] EXT4-fs (loop8): Remounting filesystem read-only [ 615.256093][T29450] EXT4-fs warning (device loop8): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 615.284098][T29466] SELinux: policydb version 0 does not match my version range 15-34 [ 615.294530][T29450] EXT4-fs (loop8): 1 orphan inode deleted [ 615.300623][T29466] SELinux: failed to load policy [ 615.306156][T29450] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 615.340128][T29468] loop7: detected capacity change from 0 to 1024 [ 615.347364][T29468] ext4: Unknown parameter 'appraise' [ 615.463049][T29458] netlink: 'syz.2.9631': attribute type 21 has an invalid length. [ 615.472502][T29458] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9631'. [ 615.481686][T29458] netlink: 'syz.2.9631': attribute type 1 has an invalid length. [ 615.497997][T29463] lo speed is unknown, defaulting to 1000 [ 615.750248][T29278] veth1_vlan: entered promiscuous mode [ 615.804397][T29470] lo speed is unknown, defaulting to 1000 [ 615.810993][T29471] lo speed is unknown, defaulting to 1000 [ 615.900778][T29278] veth0_macvtap: entered promiscuous mode [ 615.966837][T29278] veth1_macvtap: entered promiscuous mode [ 615.979792][T29474] loop2: detected capacity change from 0 to 512 [ 616.005774][T29463] lo speed is unknown, defaulting to 1000 [ 616.045528][T29474] EXT4-fs: Ignoring removed oldalloc option [ 616.052630][T29470] lo speed is unknown, defaulting to 1000 [ 616.099469][T29471] lo speed is unknown, defaulting to 1000 [ 616.109969][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.120664][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.128350][T29477] loop8: detected capacity change from 0 to 512 [ 616.130748][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.137256][T29477] EXT4-fs: Invalid want_extra_isize 5 [ 616.147166][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.147182][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.147218][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.158006][T29477] loop8: detected capacity change from 0 to 256 [ 616.162559][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.198096][T29477] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 616.199620][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.220035][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.230670][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.233512][T29474] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.9635: Parent and EA inode have the same ino 15 [ 616.240559][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.256514][T29474] EXT4-fs (loop2): Remounting filesystem read-only [ 616.263275][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.269837][T29474] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 616.279656][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.300301][T29474] EXT4-fs (loop2): 1 orphan inode deleted [ 616.300785][T29474] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 616.306024][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.306136][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.332908][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.342780][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.353258][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.371185][T29278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.460483][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.471050][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.480886][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.491320][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.501176][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.511630][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.521539][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.532060][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.541915][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.556518][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.566389][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.576919][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.586867][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.597320][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.607176][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.617645][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.627505][T29278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.638047][T29278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.649928][T29278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.719419][T29278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.728273][T29278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.737036][T29278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.745888][T29278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.831695][T29486] loop8: detected capacity change from 0 to 128 [ 617.123055][T29497] netlink: 132 bytes leftover after parsing attributes in process `syz.7.9641'. [ 617.189443][T29503] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9644'. [ 617.198670][T29503] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9644'. [ 617.224878][T29501] lo speed is unknown, defaulting to 1000 [ 617.269110][T29505] loop4: detected capacity change from 0 to 512 [ 617.279905][T29510] loop7: detected capacity change from 0 to 1024 [ 617.286995][T29505] EXT4-fs: Ignoring removed oldalloc option [ 617.295312][T29510] ext4: Unknown parameter 'appraise' [ 617.306387][T29507] loop8: detected capacity change from 0 to 512 [ 617.321726][T29505] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.9645: Parent and EA inode have the same ino 15 [ 617.364916][T29507] EXT4-fs: Ignoring removed oldalloc option [ 617.381310][T29505] EXT4-fs (loop4): Remounting filesystem read-only [ 617.388052][T29505] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 617.458011][T29501] lo speed is unknown, defaulting to 1000 [ 617.467786][T29507] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.9646: Parent and EA inode have the same ino 15 [ 617.471869][T29505] EXT4-fs (loop4): 1 orphan inode deleted [ 617.483041][T29507] EXT4-fs (loop8): Remounting filesystem read-only [ 617.492406][T29507] EXT4-fs warning (device loop8): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 617.527701][T29507] EXT4-fs (loop8): 1 orphan inode deleted [ 617.582720][T29514] lo speed is unknown, defaulting to 1000 [ 617.658853][T29514] lo speed is unknown, defaulting to 1000 [ 617.695899][T29507] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 617.992759][T29505] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 618.243432][T29521] loop2: detected capacity change from 0 to 1024 [ 618.262301][T29524] loop7: detected capacity change from 0 to 128 [ 618.271242][T29521] ext4: Unknown parameter 'appraise' [ 618.444733][T29526] netlink: 132 bytes leftover after parsing attributes in process `syz.7.9651'. [ 618.509365][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 618.509401][ T29] audit: type=1326 audit(1737678957.597:50856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29504 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa214a8b690 code=0x7ffc0000 [ 618.731759][T29528] lo speed is unknown, defaulting to 1000 [ 618.773804][T29528] lo speed is unknown, defaulting to 1000 [ 618.932012][T29529] lo speed is unknown, defaulting to 1000 [ 618.949794][ T29] audit: type=1326 audit(1737678957.687:50857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29504 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa214a8c92b code=0x7ffc0000 [ 618.966561][T29529] lo speed is unknown, defaulting to 1000 [ 618.973357][ T29] audit: type=1326 audit(1737678957.687:50858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29504 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa214a8b98a code=0x7ffc0000 [ 618.973393][ T29] audit: type=1326 audit(1737678957.687:50859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29504 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 618.973456][ T29] audit: type=1326 audit(1737678957.687:50860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29504 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 619.050005][ T29] audit: type=1326 audit(1737678957.697:50861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29504 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 619.073861][ T29] audit: type=1326 audit(1737678957.697:50862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29504 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 619.097614][ T29] audit: type=1326 audit(1737678957.697:50863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29504 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 619.121377][ T29] audit: type=1326 audit(1737678957.697:50864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29504 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 619.145140][ T29] audit: type=1326 audit(1737678957.697:50865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29504 comm="syz.4.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 619.262201][T29538] loop2: detected capacity change from 0 to 1024 [ 619.283539][T29538] ext4: Unknown parameter 'appraise' [ 619.444753][T29541] loop4: detected capacity change from 0 to 1024 [ 619.452606][T29541] ext4: Unknown parameter 'appraise' [ 620.389831][T29544] lo speed is unknown, defaulting to 1000 [ 621.459838][T29552] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9657'. [ 621.469001][T29552] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9657'. [ 621.690141][T29544] lo speed is unknown, defaulting to 1000 [ 621.720693][T29545] lo speed is unknown, defaulting to 1000 [ 621.727029][T29549] lo speed is unknown, defaulting to 1000 [ 621.762631][T29545] lo speed is unknown, defaulting to 1000 [ 621.796131][T29549] lo speed is unknown, defaulting to 1000 [ 621.801375][T29548] lo speed is unknown, defaulting to 1000 [ 621.848701][T29548] lo speed is unknown, defaulting to 1000 [ 622.077093][T29564] loop4: detected capacity change from 0 to 128 [ 622.151888][T29568] loop2: detected capacity change from 0 to 512 [ 622.174677][T29568] EXT4-fs: Ignoring removed oldalloc option [ 622.185984][T29572] loop4: detected capacity change from 0 to 512 [ 622.194005][T29572] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 622.214530][T29568] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.9663: Parent and EA inode have the same ino 15 [ 622.226026][T29579] loop1: detected capacity change from 0 to 1024 [ 622.231292][T29572] EXT4-fs (loop4): 1 truncate cleaned up [ 622.233895][T29579] ext4: Unknown parameter 'appraise' [ 622.277662][T29568] EXT4-fs (loop2): Remounting filesystem read-only [ 622.284215][T29568] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 622.294730][T29572] EXT4-fs mount: 14 callbacks suppressed [ 622.294746][T29572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.330066][T29580] SELinux: syz.7.9667 (29580) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 622.345294][T29568] EXT4-fs (loop2): 1 orphan inode deleted [ 622.379008][T29572] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 622.388163][T29568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.437683][T29568] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 622.454265][T29568] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.592209][T28831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.832088][T29582] lo speed is unknown, defaulting to 1000 [ 622.865500][T29582] lo speed is unknown, defaulting to 1000 [ 622.953786][T29585] lo speed is unknown, defaulting to 1000 [ 622.988658][T29585] lo speed is unknown, defaulting to 1000 [ 623.256526][T29600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9673'. [ 623.265639][T29600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9673'. [ 623.306116][T29604] netlink: 'syz.2.9672': attribute type 21 has an invalid length. [ 623.364747][T29604] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9672'. [ 623.570173][T29615] loop1: detected capacity change from 0 to 128 [ 623.682068][T29617] loop1: detected capacity change from 0 to 1024 [ 623.696884][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 623.696898][ T29] audit: type=1326 audit(1737678962.827:51055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29618 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 623.746226][T29619] loop4: detected capacity change from 0 to 512 [ 623.759976][T29619] EXT4-fs: Ignoring removed oldalloc option [ 623.766744][ T29] audit: type=1326 audit(1737678962.877:51056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29618 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 623.767926][T29617] ext4: Unknown parameter 'appraise' [ 623.790438][ T29] audit: type=1326 audit(1737678962.877:51057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29618 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 623.819311][ T29] audit: type=1326 audit(1737678962.877:51058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29618 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 623.843074][ T29] audit: type=1326 audit(1737678962.877:51059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29618 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 623.866790][ T29] audit: type=1326 audit(1737678962.877:51060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29618 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 623.890411][ T29] audit: type=1326 audit(1737678962.877:51061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29618 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 623.910928][T29619] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.9680: Parent and EA inode have the same ino 15 [ 623.913909][ T29] audit: type=1326 audit(1737678962.877:51062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29618 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 623.926552][T29619] EXT4-fs (loop4): Remounting filesystem read-only [ 623.949742][ T29] audit: type=1326 audit(1737678962.877:51063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29618 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 623.956242][T29619] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 623.979818][ T29] audit: type=1326 audit(1737678962.877:51064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29618 comm="syz.4.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 623.989967][T29619] EXT4-fs (loop4): 1 orphan inode deleted [ 624.070201][T29621] lo speed is unknown, defaulting to 1000 [ 624.139233][T29619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.175194][T29619] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 624.182549][T29619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.197829][T29621] lo speed is unknown, defaulting to 1000 [ 624.297095][T29630] lo speed is unknown, defaulting to 1000 [ 624.350807][T29630] lo speed is unknown, defaulting to 1000 [ 624.377967][T29631] lo speed is unknown, defaulting to 1000 [ 624.430513][T29631] lo speed is unknown, defaulting to 1000 [ 624.490076][T29634] loop8: detected capacity change from 0 to 128 [ 624.536002][T29636] loop4: detected capacity change from 0 to 1024 [ 624.638439][T29636] ext4: Unknown parameter 'appraise' [ 624.943853][T29642] lo speed is unknown, defaulting to 1000 [ 625.004301][T29642] lo speed is unknown, defaulting to 1000 [ 625.144160][T29642] lo speed is unknown, defaulting to 1000 [ 625.214402][T29642] lo speed is unknown, defaulting to 1000 [ 625.583489][T29656] loop4: detected capacity change from 0 to 128 [ 625.957268][T29664] loop8: detected capacity change from 0 to 512 [ 625.984644][T29664] EXT4-fs: Ignoring removed oldalloc option [ 626.183389][T29664] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.9696: Parent and EA inode have the same ino 15 [ 626.257216][T29668] loop4: detected capacity change from 0 to 1024 [ 626.258072][T29664] EXT4-fs (loop8): Remounting filesystem read-only [ 626.270232][T29664] EXT4-fs warning (device loop8): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 626.277911][T29668] ext4: Unknown parameter 'appraise' [ 626.307656][T29664] EXT4-fs (loop8): 1 orphan inode deleted [ 626.316389][T29664] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.341756][T29664] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 626.473722][T29664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.587097][T29671] lo speed is unknown, defaulting to 1000 [ 626.640954][T29671] lo speed is unknown, defaulting to 1000 [ 626.858974][T29671] lo speed is unknown, defaulting to 1000 [ 626.928890][T29671] lo speed is unknown, defaulting to 1000 [ 627.613624][T29683] loop4: detected capacity change from 0 to 1024 [ 627.700436][T29683] ext4: Unknown parameter 'appraise' [ 627.730982][T29689] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9704'. [ 627.764693][T29687] loop1: detected capacity change from 0 to 4096 [ 627.921073][T29687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.087754][T29700] lo speed is unknown, defaulting to 1000 [ 628.141090][T29700] lo speed is unknown, defaulting to 1000 [ 628.261259][T29699] lo speed is unknown, defaulting to 1000 [ 628.332294][T29699] lo speed is unknown, defaulting to 1000 [ 628.389215][T29704] loop2: detected capacity change from 0 to 512 [ 628.491949][T29704] EXT4-fs: Ignoring removed oldalloc option [ 628.499440][T29702] loop8: detected capacity change from 0 to 512 [ 628.510398][T29687] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.9703: corrupted inode contents [ 628.529175][T29702] EXT4-fs: Ignoring removed oldalloc option [ 628.549459][T29704] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.9708: Parent and EA inode have the same ino 15 [ 628.565032][T29702] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.9707: Parent and EA inode have the same ino 15 [ 628.590675][T29687] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #15: comm syz.1.9703: mark_inode_dirty error [ 628.608526][T29704] EXT4-fs (loop2): Remounting filesystem read-only [ 628.615087][T29704] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 628.640375][T29702] EXT4-fs (loop8): Remounting filesystem read-only [ 628.646958][T29702] EXT4-fs warning (device loop8): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 628.669828][T29687] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.9703: corrupted inode contents [ 628.682242][T29704] EXT4-fs (loop2): 1 orphan inode deleted [ 628.692709][T29704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.709660][T29702] EXT4-fs (loop8): 1 orphan inode deleted [ 628.715893][T29702] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.750188][T29687] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.9703: mark_inode_dirty error [ 628.761806][T29704] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 628.777677][T29702] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 628.787440][T29704] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.799239][T29687] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.9703: corrupted inode contents [ 628.819499][T29702] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.843848][T29687] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.9703: mark_inode_dirty error [ 628.870388][T29687] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.9703: corrupted inode contents [ 628.897916][T29687] EXT4-fs error (device loop1): ext4_truncate:4240: inode #15: comm syz.1.9703: mark_inode_dirty error [ 628.922025][T29687] EXT4-fs error (device loop1): ext4_evict_inode:267: comm syz.1.9703: couldn't truncate inode 15 (err -117) [ 628.979681][T29278] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.997671][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 628.997700][ T29] audit: type=1326 audit(1737678967.627:51219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29703 comm="syz.2.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe6c894b98a code=0x7ffc0000 [ 629.032748][ T29] audit: type=1326 audit(1737678967.627:51220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29703 comm="syz.2.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe6c894b98a code=0x7ffc0000 [ 629.056895][ T29] audit: type=1326 audit(1737678967.627:51221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29703 comm="syz.2.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe6c894b597 code=0x7ffc0000 [ 629.081182][ T29] audit: type=1326 audit(1737678967.627:51222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29703 comm="syz.2.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe6c894e4ca code=0x7ffc0000 [ 629.104904][ T29] audit: type=1400 audit(1737678967.637:51223): avc: denied { remove_name } for pid=29686 comm="syz.1.9703" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 629.127779][ T29] audit: type=1400 audit(1737678967.637:51224): avc: denied { rename } for pid=29686 comm="syz.1.9703" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 629.152364][ T29] audit: type=1400 audit(1737678967.637:51225): avc: denied { unlink } for pid=29686 comm="syz.1.9703" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 629.176569][ T29] audit: type=1400 audit(1737678968.087:51226): avc: denied { read append open } for pid=29686 comm="syz.1.9703" path="/15/file2/cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 629.268592][ T29] audit: type=1326 audit(1737678968.397:51227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29703 comm="syz.2.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6c894b690 code=0x7ffc0000 [ 629.297784][ T29] audit: type=1326 audit(1737678968.397:51228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29703 comm="syz.2.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6c894c92b code=0x7ffc0000 [ 629.324584][T29712] netlink: 'syz.4.9710': attribute type 21 has an invalid length. [ 629.376049][T29712] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9710'. [ 629.456696][T29719] loop2: detected capacity change from 0 to 512 [ 629.466420][T29719] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 629.479461][T29724] loop8: detected capacity change from 0 to 128 [ 629.548640][T29719] EXT4-fs (loop2): 1 truncate cleaned up [ 629.620608][T29719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.663696][T29731] netlink: 132 bytes leftover after parsing attributes in process `syz.7.9716'. [ 629.675688][T29719] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 629.795058][T28565] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.936988][T29750] loop7: detected capacity change from 0 to 128 [ 629.947437][T29748] lo speed is unknown, defaulting to 1000 [ 629.959018][T29756] loop2: detected capacity change from 0 to 2048 [ 629.977972][T29756] EXT4-fs: Ignoring removed mblk_io_submit option [ 629.984729][T29756] EXT4-fs: Ignoring removed i_version option [ 630.031039][T29748] lo speed is unknown, defaulting to 1000 [ 630.037775][T29756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.075341][T29756] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 630.083252][T29756] @: renamed from vlan0 (while UP) [ 630.120249][T29766] FAULT_INJECTION: forcing a failure. [ 630.120249][T29766] name failslab, interval 1, probability 0, space 0, times 0 [ 630.133484][T29766] CPU: 0 UID: 0 PID: 29766 Comm: syz.7.9729 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 630.133511][T29766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 630.133593][T29766] Call Trace: [ 630.133601][T29766] [ 630.133610][T29766] dump_stack_lvl+0xf2/0x150 [ 630.133665][T29766] dump_stack+0x15/0x1a [ 630.133682][T29766] should_fail_ex+0x223/0x230 [ 630.133716][T29766] should_failslab+0x8f/0xb0 [ 630.133739][T29766] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 630.133773][T29766] ? __d_alloc+0x3d/0x340 [ 630.133854][T29766] __d_alloc+0x3d/0x340 [ 630.133885][T29766] d_alloc_pseudo+0x1e/0x80 [ 630.133917][T29766] alloc_file_pseudo+0x70/0x140 [ 630.133986][T29766] __shmem_file_setup+0x1bb/0x1f0 [ 630.134018][T29766] shmem_file_setup+0x3b/0x50 [ 630.134041][T29766] __se_sys_memfd_create+0x31d/0x5c0 [ 630.134071][T29766] __x64_sys_memfd_create+0x31/0x40 [ 630.134183][T29766] x64_sys_call+0x2d4c/0x2dc0 [ 630.134209][T29766] do_syscall_64+0xc9/0x1c0 [ 630.134249][T29766] ? clear_bhb_loop+0x55/0xb0 [ 630.134269][T29766] ? clear_bhb_loop+0x55/0xb0 [ 630.134291][T29766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.134332][T29766] RIP: 0033:0x7f16e754cd29 [ 630.134350][T29766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.134372][T29766] RSP: 002b:00007f16e5bb6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 630.134453][T29766] RAX: ffffffffffffffda RBX: 0000000000000517 RCX: 00007f16e754cd29 [ 630.134468][T29766] RDX: 00007f16e5bb6ef0 RSI: 0000000000000000 RDI: 00007f16e75cec01 [ 630.134483][T29766] RBP: 0000000020000140 R08: 00007f16e5bb6bb7 R09: 00007f16e5bb6e40 [ 630.134498][T29766] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000040 [ 630.134513][T29766] R13: 00007f16e5bb6ef0 R14: 00007f16e5bb6eb0 R15: 0000000020000080 [ 630.134535][T29766] [ 630.367007][T28565] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.425327][T29774] loop7: detected capacity change from 0 to 1024 [ 630.433810][T29772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9730'. [ 630.436730][T29774] ext4: Unknown parameter 'appraise' [ 630.580706][T29782] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9735'. [ 630.697505][T29790] loop4: detected capacity change from 0 to 128 [ 630.764690][T29788] lo speed is unknown, defaulting to 1000 [ 630.822044][T29788] lo speed is unknown, defaulting to 1000 [ 630.894989][T29791] lo speed is unknown, defaulting to 1000 [ 630.952137][T29791] lo speed is unknown, defaulting to 1000 [ 631.135920][T29797] tipc: Enabling of bearer rejected, already enabled [ 631.300241][T29808] FAULT_INJECTION: forcing a failure. [ 631.300241][T29808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.313892][T29808] CPU: 1 UID: 0 PID: 29808 Comm: syz.2.9745 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 631.313962][T29808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 631.313978][T29808] Call Trace: [ 631.313987][T29808] [ 631.313997][T29808] dump_stack_lvl+0xf2/0x150 [ 631.314026][T29808] dump_stack+0x15/0x1a [ 631.314046][T29808] should_fail_ex+0x223/0x230 [ 631.314243][T29808] should_fail+0xb/0x10 [ 631.314379][T29808] should_fail_usercopy+0x1a/0x20 [ 631.314415][T29808] _copy_from_user+0x1c/0xa0 [ 631.314455][T29808] copy_msghdr_from_user+0x54/0x2a0 [ 631.314544][T29808] ? __fget_files+0x17c/0x1c0 [ 631.314574][T29808] __sys_sendmsg+0x13e/0x230 [ 631.314613][T29808] __x64_sys_sendmsg+0x46/0x50 [ 631.314635][T29808] x64_sys_call+0x2734/0x2dc0 [ 631.314658][T29808] do_syscall_64+0xc9/0x1c0 [ 631.314802][T29808] ? clear_bhb_loop+0x55/0xb0 [ 631.314916][T29808] ? clear_bhb_loop+0x55/0xb0 [ 631.314936][T29808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.315008][T29808] RIP: 0033:0x7fe6c894cd29 [ 631.315029][T29808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.315052][T29808] RSP: 002b:00007fe6c6fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.315076][T29808] RAX: ffffffffffffffda RBX: 00007fe6c8b65fa0 RCX: 00007fe6c894cd29 [ 631.315091][T29808] RDX: 0000000000040000 RSI: 0000000020000200 RDI: 0000000000000003 [ 631.315105][T29808] RBP: 00007fe6c6fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 631.315118][T29808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.315208][T29808] R13: 0000000000000000 R14: 00007fe6c8b65fa0 R15: 00007ffe990f18b8 [ 631.315232][T29808] [ 631.663970][T29817] lo speed is unknown, defaulting to 1000 [ 631.784178][T29817] lo speed is unknown, defaulting to 1000 [ 632.048278][T29824] netlink: 132 bytes leftover after parsing attributes in process `syz.7.9752'. [ 632.132703][T29832] loop2: detected capacity change from 0 to 128 [ 632.205760][T29841] loop2: detected capacity change from 0 to 512 [ 632.252646][T29841] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 632.313328][T29850] netlink: 'syz.7.9759': attribute type 21 has an invalid length. [ 632.348134][T29841] EXT4-fs (loop2): 1 truncate cleaned up [ 632.350097][T29850] netlink: 132 bytes leftover after parsing attributes in process `syz.7.9759'. [ 632.392028][T29841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.467290][T29841] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.9757: corrupted in-inode xattr: overlapping e_value [ 632.529005][T29841] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1772: inode #15: comm syz.2.9757: unable to update i_inline_off [ 632.562200][T29858] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.9757: corrupted in-inode xattr: overlapping e_value [ 632.578118][T29860] loop1: detected capacity change from 0 to 128 [ 632.599908][T29863] tipc: Started in network mode [ 632.604892][T29863] tipc: Node identity ac14140f, cluster identity 4711 [ 632.628155][T29860] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 632.632101][T29863] tipc: New replicast peer: 10.1.1.2 [ 632.645726][T29863] tipc: Enabled bearer , priority 10 [ 632.657476][T28565] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.668169][T29860] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 632.746114][T29874] loop8: detected capacity change from 0 to 128 [ 632.748999][T29867] loop7: detected capacity change from 0 to 512 [ 632.761784][T29876] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9767'. [ 632.772275][T29867] EXT4-fs: Ignoring removed oldalloc option [ 632.793502][T29867] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.9768: Parent and EA inode have the same ino 15 [ 632.810971][T29867] EXT4-fs (loop7): Remounting filesystem read-only [ 632.817718][T29867] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 632.832409][T29883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2061 sclass=netlink_route_socket pid=29883 comm=syz.8.9771 [ 632.847350][T29867] EXT4-fs (loop7): 1 orphan inode deleted [ 632.866145][T29867] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.882477][T29885] netlink: 'syz.4.9773': attribute type 21 has an invalid length. [ 632.890607][T29885] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9773'. [ 632.905233][T29867] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 632.912944][T29867] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.964299][ T3355] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 632.971847][ T3355] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 632.979961][ T3355] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 632.988047][ T3355] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 632.995888][ T3355] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 633.003596][ T3355] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 633.011402][ T3355] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 633.019130][ T3355] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 633.026532][ T3355] hid-generic 0000:0000:0000.0006: item fetching failed at offset 8/43 [ 633.036847][ T3355] hid-generic 0000:0000:0000.0006: probe with driver hid-generic failed with error -22 [ 633.123146][T29898] program syz.2.9778 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 633.222314][T29905] tipc: Enabling of bearer rejected, already enabled [ 633.309384][T29911] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9784'. [ 633.402148][T29918] netlink: 'syz.2.9785': attribute type 21 has an invalid length. [ 633.425449][T29918] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9785'. [ 633.438830][T29278] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 633.488292][T29920] loop4: detected capacity change from 0 to 512 [ 633.501034][T29920] EXT4-fs: Ignoring removed oldalloc option [ 633.541075][T29920] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.9787: Parent and EA inode have the same ino 15 [ 633.612594][T29927] loop2: detected capacity change from 0 to 1024 [ 633.622442][T29920] EXT4-fs (loop4): Remounting filesystem read-only [ 633.629665][T29920] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 633.662697][T29927] ext4: Unknown parameter 'appraise' [ 633.672976][T29920] EXT4-fs (loop4): 1 orphan inode deleted [ 633.692638][T29920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.769697][ T8] tipc: Node number set to 2886997007 [ 633.776736][T29920] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 633.785520][T29920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.800750][T29936] tipc: Started in network mode [ 633.801971][T29937] tmpfs: Unknown parameter '00000000000000000008' [ 633.805697][T29936] tipc: Node identity ac14140f, cluster identity 4711 [ 633.845901][T29936] tipc: New replicast peer: 10.1.1.2 [ 633.851302][T29936] tipc: Enabled bearer , priority 10 [ 633.899311][T29941] lo speed is unknown, defaulting to 1000 [ 633.953574][T29941] lo speed is unknown, defaulting to 1000 [ 634.078667][T29941] lo speed is unknown, defaulting to 1000 [ 634.145954][T29941] lo speed is unknown, defaulting to 1000 [ 634.243545][ T29] kauditd_printk_skb: 581 callbacks suppressed [ 634.243563][ T29] audit: type=1326 audit(1737678973.377:51810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.4.9787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 634.273722][ T29] audit: type=1326 audit(1737678973.377:51811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.4.9787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 634.297705][ T29] audit: type=1326 audit(1737678973.377:51812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.4.9787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 634.391571][T29947] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9795'. [ 634.617271][ T29] audit: type=1326 audit(1737678973.467:51813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.4.9787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 634.641023][ T29] audit: type=1326 audit(1737678973.467:51814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.4.9787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 634.664692][ T29] audit: type=1326 audit(1737678973.467:51815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.4.9787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 634.688389][ T29] audit: type=1326 audit(1737678973.467:51816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.4.9787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 634.712740][ T29] audit: type=1326 audit(1737678973.467:51817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.4.9787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 634.736363][ T29] audit: type=1326 audit(1737678973.467:51818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.4.9787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 634.759997][ T29] audit: type=1326 audit(1737678973.467:51819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.4.9787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa214a8cd29 code=0x7ffc0000 [ 634.848240][T29960] netlink: 'syz.4.9799': attribute type 21 has an invalid length. [ 634.877693][T29960] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9799'. [ 634.968457][ T8] tipc: Node number set to 2886997007 [ 635.161101][T29974] loop1: detected capacity change from 0 to 128 [ 635.199739][T29977] loop8: detected capacity change from 0 to 512 [ 635.217388][T29977] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 635.232726][T29980] loop4: detected capacity change from 0 to 128 [ 635.255947][T29979] tipc: Enabling of bearer rejected, already enabled [ 635.266194][T29977] EXT4-fs (loop8): 1 truncate cleaned up [ 635.282537][T29977] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.291339][T29984] loop7: detected capacity change from 0 to 1024 [ 635.304155][T29984] ext4: Unknown parameter 'appraise' [ 635.328369][T29987] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2070 sclass=netlink_xfrm_socket pid=29987 comm=syz.1.9810 [ 635.361526][T29977] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 635.541630][T29994] lo speed is unknown, defaulting to 1000 [ 635.597425][T29994] lo speed is unknown, defaulting to 1000 [ 635.727634][T29994] lo speed is unknown, defaulting to 1000 [ 635.785463][T29994] lo speed is unknown, defaulting to 1000 [ 635.943455][T29999] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9813'. [ 635.962111][T21443] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.115106][T30002] FAULT_INJECTION: forcing a failure. [ 636.115106][T30002] name failslab, interval 1, probability 0, space 0, times 0 [ 636.128122][T30002] CPU: 1 UID: 0 PID: 30002 Comm: syz.2.9815 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 636.128147][T30002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 636.128160][T30002] Call Trace: [ 636.128168][T30002] [ 636.128218][T30002] dump_stack_lvl+0xf2/0x150 [ 636.128243][T30002] dump_stack+0x15/0x1a [ 636.128263][T30002] should_fail_ex+0x223/0x230 [ 636.128364][T30002] should_failslab+0x8f/0xb0 [ 636.128388][T30002] kmem_cache_alloc_noprof+0x52/0x320 [ 636.128428][T30002] ? __inet_hash_connect+0x601/0x1160 [ 636.128507][T30002] ? inet_sk_get_local_port_range+0x80/0x100 [ 636.128538][T30002] __inet_hash_connect+0x601/0x1160 [ 636.128560][T30002] ? __pfx___inet6_check_established+0x10/0x10 [ 636.128596][T30002] ? secure_ipv6_port_ephemeral+0xa4/0x130 [ 636.128643][T30002] inet6_hash_connect+0x72/0x80 [ 636.128745][T30002] dccp_v6_connect+0x6d4/0x8a0 [ 636.128807][T30002] __inet_stream_connect+0x162/0x790 [ 636.128844][T30002] ? _raw_spin_unlock_bh+0x36/0x40 [ 636.128952][T30002] ? release_sock+0x117/0x150 [ 636.128988][T30002] ? _raw_spin_unlock_bh+0x36/0x40 [ 636.129015][T30002] ? lock_sock_nested+0x10f/0x140 [ 636.129146][T30002] ? selinux_netlbl_socket_connect+0x113/0x130 [ 636.129183][T30002] inet_stream_connect+0x48/0x70 [ 636.129223][T30002] ? __pfx_inet_stream_connect+0x10/0x10 [ 636.129336][T30002] __sys_connect+0x18f/0x1b0 [ 636.129381][T30002] __x64_sys_connect+0x41/0x50 [ 636.129554][T30002] x64_sys_call+0x22a7/0x2dc0 [ 636.129579][T30002] do_syscall_64+0xc9/0x1c0 [ 636.129652][T30002] ? clear_bhb_loop+0x55/0xb0 [ 636.129675][T30002] ? clear_bhb_loop+0x55/0xb0 [ 636.129700][T30002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.129807][T30002] RIP: 0033:0x7fe6c894cd29 [ 636.129826][T30002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.129848][T30002] RSP: 002b:00007fe6c6fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 636.129880][T30002] RAX: ffffffffffffffda RBX: 00007fe6c8b65fa0 RCX: 00007fe6c894cd29 [ 636.129896][T30002] RDX: 0000000000000062 RSI: 0000000020000000 RDI: 0000000000000003 [ 636.129911][T30002] RBP: 00007fe6c6fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 636.129925][T30002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.129970][T30002] R13: 0000000000000000 R14: 00007fe6c8b65fa0 R15: 00007ffe990f18b8 [ 636.130020][T30002] [ 636.583033][T30007] netlink: 'syz.7.9816': attribute type 21 has an invalid length. [ 636.637796][T30007] netlink: 132 bytes leftover after parsing attributes in process `syz.7.9816'. [ 636.649867][T30013] loop8: detected capacity change from 0 to 128 [ 636.912205][T30018] tipc: Enabling of bearer rejected, already enabled [ 637.097809][T30027] loop2: detected capacity change from 0 to 512 [ 637.117834][T30027] EXT4-fs: Ignoring removed oldalloc option [ 637.135507][T30030] lo speed is unknown, defaulting to 1000 [ 637.143147][T30027] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.9823: Parent and EA inode have the same ino 15 [ 637.166691][T30027] EXT4-fs (loop2): Remounting filesystem read-only [ 637.173865][T30027] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 637.194365][T30027] EXT4-fs (loop2): 1 orphan inode deleted [ 637.201432][T30027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.205700][T30030] lo speed is unknown, defaulting to 1000 [ 637.219916][T30027] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 637.251636][T30027] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.488890][T30049] loop2: detected capacity change from 0 to 128 [ 637.531317][T30048] lo speed is unknown, defaulting to 1000 [ 637.630044][T30053] tipc: Enabling of bearer rejected, already enabled [ 637.644697][T30048] lo speed is unknown, defaulting to 1000 [ 637.711474][T30058] loop2: detected capacity change from 0 to 1024 [ 637.739080][T30058] ext4: Unknown parameter 'appraise' [ 637.896722][T30063] loop4: detected capacity change from 0 to 512 [ 637.908154][T30061] loop7: detected capacity change from 0 to 512 [ 637.927178][T30063] EXT4-fs: Ignoring removed oldalloc option [ 637.937039][T30061] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 638.012111][T30066] lo speed is unknown, defaulting to 1000 [ 638.066581][T30066] lo speed is unknown, defaulting to 1000 [ 638.192503][T30066] lo speed is unknown, defaulting to 1000 [ 638.246660][T30066] lo speed is unknown, defaulting to 1000 [ 638.389492][T30061] EXT4-fs (loop7): 1 truncate cleaned up [ 638.396205][T30063] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.9837: Parent and EA inode have the same ino 15 [ 638.419774][T30061] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.443047][T11190] bridge_slave_1: left allmulticast mode [ 638.448837][T11190] bridge_slave_1: left promiscuous mode [ 638.454515][T11190] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.474498][T30063] EXT4-fs (loop4): Remounting filesystem read-only [ 638.481203][T30063] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 638.521909][T11190] bridge_slave_0: left allmulticast mode [ 638.527736][T11190] bridge_slave_0: left promiscuous mode [ 638.533398][T11190] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.587717][T30061] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 638.612961][T30063] EXT4-fs (loop4): 1 orphan inode deleted [ 638.629330][T30075] loop1: detected capacity change from 0 to 512 [ 638.643256][T30063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.672584][T30075] EXT4-fs: Ignoring removed oldalloc option [ 638.706360][T30063] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 638.718323][T30075] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.9838: Parent and EA inode have the same ino 15 [ 638.767177][T30063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.805889][T22561] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.815173][T30075] EXT4-fs (loop1): Remounting filesystem read-only [ 638.821834][T30075] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 638.874056][T30075] EXT4-fs (loop1): 1 orphan inode deleted [ 638.888800][T30075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.925831][T11190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.958637][T11190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.967394][T30075] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 638.978014][T30075] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.987920][T11190] bond0 (unregistering): Released all slaves [ 638.996875][T11190] bond1 (unregistering): Released all slaves [ 638.999173][T30097] loop7: detected capacity change from 0 to 128 [ 639.073646][T30098] loop4: detected capacity change from 0 to 512 [ 639.168201][T11190] tipc: Disabling bearer [ 639.173505][T11190] tipc: Left network mode [ 639.258516][T30098] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 639.300674][ T29] kauditd_printk_skb: 451 callbacks suppressed [ 639.300688][ T29] audit: type=1400 audit(1737678978.437:52271): avc: denied { unmount } for pid=22561 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 639.336901][T30098] EXT4-fs (loop4): 1 truncate cleaned up [ 639.353707][T11190] hsr_slave_0: left promiscuous mode [ 639.361584][T30098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.384486][T30107] loop7: detected capacity change from 0 to 1024 [ 639.397625][T11190] hsr_slave_1: left promiscuous mode [ 639.418818][T11190] dummy0: left promiscuous mode [ 639.432995][ T29] audit: type=1400 audit(1737678978.567:52272): avc: denied { mount } for pid=30095 comm="syz.4.9845" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 639.458142][T30107] ext4: Unknown parameter 'appraise' [ 639.474846][T30096] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 639.504884][ T29] audit: type=1400 audit(1737678978.597:52273): avc: denied { create } for pid=30106 comm="syz.7.9848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 639.524796][ T29] audit: type=1400 audit(1737678978.597:52274): avc: denied { setopt } for pid=30106 comm="syz.7.9848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 639.544544][ T29] audit: type=1400 audit(1737678978.597:52275): avc: denied { bind } for pid=30106 comm="syz.7.9848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 639.564438][ T29] audit: type=1400 audit(1737678978.597:52276): avc: denied { name_bind } for pid=30106 comm="syz.7.9848" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 639.586426][ T29] audit: type=1400 audit(1737678978.597:52277): avc: denied { node_bind } for pid=30106 comm="syz.7.9848" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 639.607449][ T29] audit: type=1400 audit(1737678978.607:52278): avc: denied { execmem } for pid=30106 comm="syz.7.9848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 639.626931][ T29] audit: type=1400 audit(1737678978.607:52279): avc: denied { write } for pid=30095 comm="+}[@" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 639.648855][ T29] audit: type=1400 audit(1737678978.607:52280): avc: denied { open } for pid=30095 comm="+}[@" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 639.797361][T30116] loop2: detected capacity change from 0 to 1024 [ 639.806187][T30116] ext4: Unknown parameter 'appraise' [ 640.414138][T11190] team0 (unregistering): Port device team_slave_1 removed [ 640.437522][T28831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.485178][T11190] team0 (unregistering): Port device team_slave_0 removed [ 640.505507][T30132] loop8: detected capacity change from 0 to 512 [ 640.531354][T30132] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 640.625088][T30120] lo speed is unknown, defaulting to 1000 [ 640.631288][T30123] lo speed is unknown, defaulting to 1000 [ 640.662526][T30128] lo speed is unknown, defaulting to 1000 [ 640.677527][T30120] lo speed is unknown, defaulting to 1000 [ 640.717736][T30123] lo speed is unknown, defaulting to 1000 [ 640.736259][T30128] lo speed is unknown, defaulting to 1000 [ 640.823384][T30132] EXT4-fs (loop8): 1 truncate cleaned up [ 640.829970][T30132] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.912095][T30132] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 640.990161][T30147] tipc: Enabling of bearer rejected, already enabled [ 641.013379][T21443] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.099985][T30156] loop4: detected capacity change from 0 to 128 [ 641.188164][T30152] lo speed is unknown, defaulting to 1000 [ 641.265037][T30175] loop4: detected capacity change from 0 to 512 [ 641.272321][T30175] EXT4-fs: Ignoring removed oldalloc option [ 641.277061][T30152] lo speed is unknown, defaulting to 1000 [ 641.289034][T30175] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.9869: Parent and EA inode have the same ino 15 [ 641.314752][T30175] EXT4-fs (loop4): Remounting filesystem read-only [ 641.321573][T30175] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 641.337913][T30175] EXT4-fs (loop4): 1 orphan inode deleted [ 641.344289][T30175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.356058][T30180] loop1: detected capacity change from 0 to 1024 [ 641.358661][T30175] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 641.365643][T30180] ext4: Unknown parameter 'appraise' [ 641.376409][T30175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.442295][T11190] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.452170][T11190] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.478862][T30152] chnl_net:caif_netlink_parms(): no params data found [ 641.532154][T11190] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.542650][T11190] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.638386][T30152] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.645530][T30152] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.734786][T30152] bridge_slave_0: entered allmulticast mode [ 641.755430][T30199] loop2: detected capacity change from 0 to 128 [ 641.762888][T30152] bridge_slave_0: entered promiscuous mode [ 641.844539][T30191] tipc: Enabling of bearer rejected, already enabled [ 641.856125][T30192] lo speed is unknown, defaulting to 1000 [ 641.909527][T30192] lo speed is unknown, defaulting to 1000 [ 641.972260][T30193] lo speed is unknown, defaulting to 1000 [ 641.991572][T30152] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.998784][T30152] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.006274][T30152] bridge_slave_1: entered allmulticast mode [ 642.024455][T30152] bridge_slave_1: entered promiscuous mode [ 642.038398][T30193] lo speed is unknown, defaulting to 1000 [ 642.056399][T30152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.075357][T30152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.164239][T30207] netlink: 132 bytes leftover after parsing attributes in process `syz.8.9876'. [ 642.396039][T30222] loop4: detected capacity change from 0 to 512 [ 642.403552][T30222] EXT4-fs: Ignoring removed oldalloc option [ 642.415248][T30222] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.9883: Parent and EA inode have the same ino 15 [ 642.430655][T30222] EXT4-fs (loop4): Remounting filesystem read-only [ 642.437296][T30222] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 642.449716][T30222] EXT4-fs (loop4): 1 orphan inode deleted [ 642.456416][T30222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.473181][T30222] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 642.480529][T30222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.822429][T11190] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.832238][T11190] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.885920][T30228] netlink: 'syz.2.9885': attribute type 21 has an invalid length. [ 642.897421][T30228] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9885'. [ 642.942002][T30152] team0: Port device team_slave_0 added [ 642.948381][T30230] tipc: Enabling of bearer rejected, already enabled [ 642.957286][T30152] team0: Port device team_slave_1 added [ 642.986278][T30232] netlink: 268 bytes leftover after parsing attributes in process `syz.4.9887'. [ 643.009168][T11190] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.019147][T11190] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.041126][T30232] loop4: detected capacity change from 0 to 512 [ 643.048597][T30152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.055574][T30152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.081592][T30152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.132527][T30152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.139663][T30152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.165751][T30152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.179275][T30244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9891'. [ 643.186582][T30232] EXT4-fs (loop4): 1 orphan inode deleted [ 643.195190][T30232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.210656][T30248] loop2: detected capacity change from 0 to 1024 [ 643.211323][T30232] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.227684][T11181] EXT4-fs error (device loop4): ext4_release_dquot:6947: comm kworker/u8:17: Failed to release dquot type 1 [ 643.228623][T30248] ext4: Unknown parameter 'appraise' [ 643.315532][T28831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.345798][T30254] loop8: detected capacity change from 0 to 128 [ 643.367867][T30252] netlink: 'syz.1.9895': attribute type 21 has an invalid length. [ 643.375913][T30252] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9895'. [ 643.388694][T30152] hsr_slave_0: entered promiscuous mode [ 643.395222][T30152] hsr_slave_1: entered promiscuous mode [ 643.405272][T30152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.413183][T30152] Cannot create hsr debugfs directory [ 643.419418][T30261] netlink: 132 bytes leftover after parsing attributes in process `syz.8.9898'. [ 643.452772][T11190] bridge_slave_1: left allmulticast mode [ 643.458501][T11190] bridge_slave_1: left promiscuous mode [ 643.464212][T11190] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.473648][T11190] bridge_slave_0: left allmulticast mode [ 643.479564][T11190] bridge_slave_0: left promiscuous mode [ 643.485625][T11190] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.691947][T30264] lo speed is unknown, defaulting to 1000 [ 643.745723][T30264] lo speed is unknown, defaulting to 1000 [ 643.791303][T30267] lo speed is unknown, defaulting to 1000 [ 643.848326][T30267] lo speed is unknown, defaulting to 1000 [ 643.885722][T30276] loop1: detected capacity change from 0 to 2048 [ 643.909763][T30276] EXT4-fs: Ignoring removed bh option [ 643.966085][T30276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.025815][T30276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 644.032654][T11190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.067352][T29278] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.068742][T11190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.089973][T11190] bond0 (unregistering): Released all slaves [ 644.101592][T30289] netlink: 268 bytes leftover after parsing attributes in process `syz.4.9907'. [ 644.112469][T11190] bond1 (unregistering): Released all slaves [ 644.127219][T30291] loop8: detected capacity change from 0 to 128 [ 644.135490][T30295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9906'. [ 644.170986][T30297] netlink: 'syz.8.9909': attribute type 21 has an invalid length. [ 644.179605][T30297] netlink: 132 bytes leftover after parsing attributes in process `syz.8.9909'. [ 644.184856][T30298] loop4: detected capacity change from 0 to 512 [ 644.209417][T30298] EXT4-fs (loop4): 1 orphan inode deleted [ 644.229312][T30298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.245369][T11192] EXT4-fs error (device loop4): ext4_release_dquot:6947: comm kworker/u8:28: Failed to release dquot type 1 [ 644.262620][T30298] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.264292][T30302] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9910'. [ 644.302229][T11190] tipc: Disabling bearer [ 644.307518][T11190] tipc: Left network mode [ 644.317490][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 644.317532][ T29] audit: type=1400 audit(1737678983.447:52712): avc: denied { setopt } for pid=30307 comm="syz.8.9913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 644.350102][ T29] audit: type=1400 audit(1737678983.487:52713): avc: denied { bind } for pid=30307 comm="syz.8.9913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 644.370150][ T29] audit: type=1400 audit(1737678983.487:52714): avc: denied { setopt } for pid=30307 comm="syz.8.9913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 644.390346][ T29] audit: type=1400 audit(1737678983.487:52715): avc: denied { create } for pid=30307 comm="syz.8.9913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 644.410551][T28831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.411184][ T29] audit: type=1400 audit(1737678983.537:52716): avc: denied { write } for pid=30307 comm="syz.8.9913" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 644.550971][T30318] loop8: detected capacity change from 0 to 2048 [ 644.565967][T30318] EXT4-fs: Ignoring removed bh option [ 644.587850][T30318] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.674789][T30327] netlink: 'syz.2.9920': attribute type 21 has an invalid length. [ 644.701936][T30318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 644.722409][T21443] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.739094][T30329] loop1: detected capacity change from 0 to 128 [ 644.764660][ T29] audit: type=1326 audit(1737678983.897:52717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30333 comm="syz.2.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c894cd29 code=0x7ffc0000 [ 644.788532][ T29] audit: type=1326 audit(1737678983.897:52718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30333 comm="syz.2.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6c894cd29 code=0x7ffc0000 [ 644.812456][ T29] audit: type=1326 audit(1737678983.897:52719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30333 comm="syz.2.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c894cd29 code=0x7ffc0000 [ 644.836273][ T29] audit: type=1326 audit(1737678983.897:52720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30333 comm="syz.2.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6c894cd29 code=0x7ffc0000 [ 644.859918][ T29] audit: type=1326 audit(1737678983.897:52721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30333 comm="syz.2.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c894cd29 code=0x7ffc0000 [ 645.025970][T30152] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 645.044581][T11190] hsr_slave_0: left promiscuous mode [ 645.050924][T11190] hsr_slave_1: left promiscuous mode [ 645.057351][T11190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.065397][T11190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.078917][T30355] loop4: detected capacity change from 0 to 512 [ 645.092388][T30355] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 645.110685][T30355] EXT4-fs (loop4): 1 truncate cleaned up [ 645.116873][T30355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.118496][T11190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.137516][T11190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.162409][T11190] veth1_macvtap: left promiscuous mode [ 645.163608][T30355] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, [ 645.167973][T11190] veth0_macvtap: left promiscuous mode [ 645.168141][T11190] veth1_vlan: left promiscuous mode [ 645.176049][T30355] inode 16: [ 645.181631][T11190] veth0_vlan: left promiscuous mode [ 645.186722][T30355] block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 645.249582][T28831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.258844][T30152] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 645.270031][T30359] netlink: 'syz.8.9932': attribute type 21 has an invalid length. [ 645.278249][T30361] tipc: Enabling of bearer rejected, already enabled [ 645.340320][T11190] team0 (unregistering): Port device team_slave_1 removed [ 645.357989][T11190] team0 (unregistering): Port device team_slave_0 removed [ 645.412377][T30152] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 645.421674][T30152] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 645.483386][T30152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.514708][T30152] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.527434][T11191] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.534547][T11191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.555740][T11181] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.563526][T11181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.599565][T30398] tipc: Enabling of bearer rejected, already enabled [ 645.613508][T30399] loop1: detected capacity change from 0 to 512 [ 645.633231][T30399] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 645.663588][T30399] EXT4-fs (loop1): 1 truncate cleaned up [ 645.678998][T30399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.692223][T30403] netlink: 'syz.4.9947': attribute type 21 has an invalid length. [ 645.702994][T30399] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 645.755021][T30152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.803577][T29278] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.852309][T30412] loop2: detected capacity change from 0 to 512 [ 645.889790][T30412] EXT4-fs (loop2): 1 orphan inode deleted [ 645.908508][T30412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.921807][T11192] EXT4-fs error (device loop2): ext4_release_dquot:6947: comm kworker/u8:28: Failed to release dquot type 1 [ 645.945770][T30412] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.995880][T28565] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.046767][T30152] veth0_vlan: entered promiscuous mode [ 646.072805][T30444] tipc: Enabling of bearer rejected, already enabled [ 646.083447][T30152] veth1_vlan: entered promiscuous mode [ 646.094549][T30446] loop1: detected capacity change from 0 to 512 [ 646.117343][T30446] EXT4-fs: Ignoring removed oldalloc option [ 646.121756][T30152] veth0_macvtap: entered promiscuous mode [ 646.159643][T30446] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.9959: Parent and EA inode have the same ino 15 [ 646.182760][T30152] veth1_macvtap: entered promiscuous mode [ 646.184120][T30446] EXT4-fs (loop1): Remounting filesystem read-only [ 646.195199][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.195220][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.195231][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.195245][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.195256][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.205737][T30446] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 646.215565][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.215596][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.277463][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.287404][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.297878][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.307816][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.318367][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.328338][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.334865][T30446] EXT4-fs (loop1): 1 orphan inode deleted [ 646.338824][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.352199][T30446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.354513][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.377097][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.384284][T30446] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 646.386959][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.396448][T30446] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.403950][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.425568][T30152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.433671][T30448] netlink: 'syz.2.9960': attribute type 21 has an invalid length. [ 646.474047][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.484948][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.495452][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.507493][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.517655][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.528312][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.538237][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.548927][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.558946][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.569427][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.579503][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.590504][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.600626][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.611172][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.615894][T30475] loop2: detected capacity change from 0 to 512 [ 646.621608][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.638623][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.648493][T30152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.659020][T30152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.673256][T30475] EXT4-fs (loop2): 1 orphan inode deleted [ 646.679649][T30475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.681272][T30152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.694148][T11188] EXT4-fs error (device loop2): ext4_release_dquot:6947: comm kworker/u8:24: Failed to release dquot type 1 [ 646.715334][T30475] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.731807][T30472] tipc: Enabling of bearer rejected, already enabled [ 646.742699][T30152] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.751551][T30152] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.760359][T30152] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.769168][T30152] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.801890][T28565] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.844701][T30491] loop2: detected capacity change from 0 to 512 [ 646.853038][T30491] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 646.878512][T30491] EXT4-fs (loop2): 1 truncate cleaned up [ 646.884608][T30491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.892362][T30498] netlink: 'syz.1.9977': attribute type 21 has an invalid length. [ 646.909913][T30491] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 646.969167][T30506] loop1: detected capacity change from 0 to 512 [ 646.976195][T30506] EXT4-fs: Ignoring removed oldalloc option [ 646.995672][T30506] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.9980: Parent and EA inode have the same ino 15 [ 647.014541][T30506] EXT4-fs (loop1): Remounting filesystem read-only [ 647.021198][T30506] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 647.030806][T30511] loop4: detected capacity change from 0 to 1024 [ 647.034652][T30506] EXT4-fs (loop1): 1 orphan inode deleted [ 647.046819][T30506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.049041][T30509] netlink: 'syz.7.9858': attribute type 21 has an invalid length. [ 647.059185][T30506] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 647.073855][T30511] ext4: Unknown parameter 'appraise' [ 647.108721][T30513] loop2: detected capacity change from 0 to 128 [ 647.133372][T30515] tipc: Enabling of bearer rejected, already enabled [ 647.184358][T30519] __nla_validate_parse: 10 callbacks suppressed [ 647.184373][T30519] netlink: 268 bytes leftover after parsing attributes in process `syz.2.9985'. [ 647.267134][T30519] loop2: detected capacity change from 0 to 512 [ 647.270529][T30526] netlink: 'syz.7.9988': attribute type 21 has an invalid length. [ 647.281472][T30526] netlink: 132 bytes leftover after parsing attributes in process `syz.7.9988'. [ 647.355468][T30531] lo speed is unknown, defaulting to 1000 [ 647.408821][T30531] lo speed is unknown, defaulting to 1000 [ 647.536666][T30531] lo speed is unknown, defaulting to 1000 [ 647.601762][T30531] lo speed is unknown, defaulting to 1000 [ 647.745691][T30519] EXT4-fs (loop2): 1 orphan inode deleted [ 647.758198][T11191] EXT4-fs error (device loop2): ext4_release_dquot:6947: comm kworker/u8:27: Failed to release dquot type 1 [ 647.812320][T30519] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.934443][T30543] loop7: detected capacity change from 0 to 512 [ 647.981421][T30545] loop4: detected capacity change from 0 to 512 [ 647.992295][T30542] lo speed is unknown, defaulting to 1000 [ 648.000386][T30543] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 648.022749][T30545] EXT4-fs: Ignoring removed oldalloc option [ 648.048531][T30543] EXT4-fs (loop7): 1 truncate cleaned up [ 648.072649][T30545] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.9994: Parent and EA inode have the same ino 15 [ 648.100078][T30543] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 648.137267][T30545] EXT4-fs (loop4): Remounting filesystem read-only [ 648.143997][T30545] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 648.162571][T30552] netlink: 'syz.1.9997': attribute type 21 has an invalid length. [ 648.194374][T30545] EXT4-fs (loop4): 1 orphan inode deleted [ 648.203810][T30552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9997'. [ 648.214478][T30542] lo speed is unknown, defaulting to 1000 [ 648.223385][T30545] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 648.470976][T30564] netlink: 'syz.7.10000': attribute type 21 has an invalid length. [ 648.525657][T30564] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10000'. [ 648.653570][T30577] loop4: detected capacity change from 0 to 1024 [ 648.662044][T30577] ext4: Unknown parameter 'appraise' [ 648.701504][T30581] netlink: 268 bytes leftover after parsing attributes in process `syz.7.10007'. [ 648.755935][T30583] loop1: detected capacity change from 0 to 1024 [ 648.765736][T30583] ext4: Unknown parameter 'appraise' [ 648.779659][T30585] loop7: detected capacity change from 0 to 512 [ 648.898468][T30588] lo speed is unknown, defaulting to 1000 [ 648.932816][T30588] lo speed is unknown, defaulting to 1000 [ 649.619448][T30591] lo speed is unknown, defaulting to 1000 [ 649.659813][T30591] lo speed is unknown, defaulting to 1000 [ 649.790230][ T29] kauditd_printk_skb: 801 callbacks suppressed [ 649.790248][ T29] audit: type=1326 audit(1737678988.927:53520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30593 comm="syz.2.10011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c894cd29 code=0x7ffc0000 [ 649.797969][T30585] EXT4-fs (loop7): 1 orphan inode deleted [ 649.940398][T30588] lo speed is unknown, defaulting to 1000 [ 649.981922][T30588] lo speed is unknown, defaulting to 1000 [ 650.380179][T30591] lo speed is unknown, defaulting to 1000 [ 650.413533][T30591] lo speed is unknown, defaulting to 1000 [ 650.791236][T30596] loop2: detected capacity change from 0 to 512 [ 650.791926][T30585] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.809216][T11189] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 650.809867][T30596] EXT4-fs: Ignoring removed oldalloc option [ 650.819339][T11189] EXT4-fs error (device loop7): ext4_release_dquot:6947: comm kworker/u8:25: Failed to release dquot type 1 [ 651.233382][T30596] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.10011: Parent and EA inode have the same ino 15 [ 651.255220][T30607] netlink: 'syz.1.10014': attribute type 21 has an invalid length. [ 651.305030][T30607] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10014'. [ 651.339858][T30596] EXT4-fs (loop2): Remounting filesystem read-only [ 651.346709][T30596] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 651.372489][T30608] netlink: 'syz.8.10015': attribute type 21 has an invalid length. [ 651.449148][T30596] EXT4-fs (loop2): 1 orphan inode deleted [ 651.456585][T30608] netlink: 132 bytes leftover after parsing attributes in process `syz.8.10015'. [ 651.498323][T30596] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 651.641752][ T29] audit: type=1326 audit(1737678988.977:53521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30593 comm="syz.2.10011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6c894cd29 code=0x7ffc0000 [ 651.665823][ T29] audit: type=1326 audit(1737678988.977:53522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30593 comm="syz.2.10011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c894cd29 code=0x7ffc0000 [ 651.690630][ T29] audit: type=1326 audit(1737678988.977:53523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30593 comm="syz.2.10011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c894cd29 code=0x7ffc0000 [ 651.715074][ T29] audit: type=1400 audit(1737678989.827:53524): avc: denied { getopt } for pid=30582 comm="syz.1.10008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 651.735130][ T29] audit: type=1326 audit(1737678989.917:53525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30593 comm="syz.2.10011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6c894cd29 code=0x7ffc0000 [ 651.759452][ T29] audit: type=1326 audit(1737678989.917:53526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30593 comm="syz.2.10011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c894cd29 code=0x7ffc0000 [ 651.783323][ T29] audit: type=1326 audit(1737678989.917:53527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30593 comm="syz.2.10011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c894cd29 code=0x7ffc0000 [ 651.807509][ T29] audit: type=1326 audit(1737678989.917:53528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30593 comm="syz.2.10011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fe6c894cd29 code=0x7ffc0000 [ 651.904210][T30625] loop2: detected capacity change from 0 to 1024 [ 651.968064][T30625] ext4: Unknown parameter 'appraise' [ 651.985435][T30628] loop1: detected capacity change from 0 to 1024 [ 652.008240][T30623] lo speed is unknown, defaulting to 1000 [ 652.096511][T30628] ext4: Unknown parameter 'appraise' [ 652.268557][T30631] lo speed is unknown, defaulting to 1000 [ 652.754055][T30633] lo speed is unknown, defaulting to 1000 [ 653.052574][T30635] lo speed is unknown, defaulting to 1000 [ 653.117453][T30634] lo speed is unknown, defaulting to 1000 [ 653.161866][T30623] lo speed is unknown, defaulting to 1000 [ 653.205430][T30631] lo speed is unknown, defaulting to 1000 [ 653.229753][T30633] lo speed is unknown, defaulting to 1000 [ 653.307196][T30635] lo speed is unknown, defaulting to 1000 [ 653.340870][T30634] lo speed is unknown, defaulting to 1000 [ 653.549051][T30629] lo speed is unknown, defaulting to 1000 [ 653.563833][T30657] loop4: detected capacity change from 0 to 2048 [ 653.577902][T30657] EXT4-fs: Ignoring removed bh option [ 653.593202][T30629] lo speed is unknown, defaulting to 1000 [ 653.614949][T30657] EXT4-fs mount: 12 callbacks suppressed [ 653.614968][T30657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.654577][T30657] xt_CT: You must specify a L4 protocol and not use inversions on it [ 653.772194][T30665] netlink: 268 bytes leftover after parsing attributes in process `syz.1.10031'. [ 653.778460][T11191] bond1: left allmulticast mode [ 653.794728][T11191] bond1: left promiscuous mode [ 653.799953][T11191] bridge0: port 3(bond1) entered disabled state [ 653.811756][T11191] bridge_slave_1: left allmulticast mode [ 653.817454][T11191] bridge_slave_1: left promiscuous mode [ 653.823520][T11191] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.834170][T11191] bridge_slave_0: left allmulticast mode [ 653.840047][T11191] bridge_slave_0: left promiscuous mode [ 653.842261][T30666] loop1: detected capacity change from 0 to 512 [ 653.846122][T11191] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.860839][T11191] erspan0: left allmulticast mode [ 653.865916][T11191] erspan0: left promiscuous mode [ 653.871184][T11191] GPL: port 1(erspan0) entered disabled state [ 653.885061][T30666] EXT4-fs (loop1): 1 orphan inode deleted [ 653.892666][T30666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.906672][T30655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.907892][ T8] SELinux: failure in sel_netif_sid_slow(), invalid network interface (88) [ 653.919414][T30655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.932057][T11181] EXT4-fs error (device loop1): ext4_release_dquot:6947: comm kworker/u8:17: Failed to release dquot type 1 [ 653.973779][T30666] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 654.003834][T30671] netlink: 268 bytes leftover after parsing attributes in process `syz.7.10032'. [ 654.073165][T29278] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.090338][T11191] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 654.116469][T30673] loop7: detected capacity change from 0 to 512 [ 654.152259][T30673] EXT4-fs (loop7): 1 orphan inode deleted [ 654.158577][T30673] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.171400][T11190] EXT4-fs error (device loop7): ext4_release_dquot:6947: comm kworker/u8:26: Failed to release dquot type 1 [ 654.184501][T30673] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 654.195299][T11191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.207321][T30681] loop1: detected capacity change from 0 to 1024 [ 654.207427][T11191] ================================================================== [ 654.214124][T30681] ext4: Unknown parameter 'appraise' [ 654.221997][T11191] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 654.234078][T11191] [ 654.236432][T11191] write to 0xffffffff866873e0 of 8 bytes by task 30681 on cpu 0: [ 654.244248][T11191] data_alloc+0x291/0x2c0 [ 654.248591][T11191] prb_reserve+0x85e/0xb60 [ 654.253025][T11191] vprintk_store+0x558/0x870 [ 654.257648][T11191] vprintk_emit+0x15e/0x680 [ 654.262175][T11191] vprintk_default+0x26/0x30 [ 654.266820][T11191] vprintk+0x1d/0x30 [ 654.270839][T11191] _printk+0x7a/0xa0 [ 654.274742][T11191] set_capacity_and_notify+0x151/0x200 [ 654.280209][T11191] loop_set_size+0x2e/0x70 [ 654.284653][T11191] loop_configure+0x8bd/0xa50 [ 654.289332][T11191] lo_ioctl+0x607/0x1400 [ 654.293578][T11191] blkdev_ioctl+0x359/0x450 [ 654.298095][T11191] __se_sys_ioctl+0xc9/0x140 [ 654.302784][T11191] __x64_sys_ioctl+0x43/0x50 [ 654.307378][T11191] x64_sys_call+0x1690/0x2dc0 [ 654.312058][T11191] do_syscall_64+0xc9/0x1c0 [ 654.316575][T11191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.322490][T11191] [ 654.324883][T11191] read to 0xffffffff866873e0 of 8 bytes by task 11191 on cpu 1: [ 654.332536][T11191] prb_reserve+0x235/0xb60 [ 654.336963][T11191] vprintk_store+0x558/0x870 [ 654.341747][T11191] vprintk_emit+0x15e/0x680 [ 654.346257][T11191] vprintk_default+0x26/0x30 [ 654.350860][T11191] vprintk+0x1d/0x30 [ 654.354754][T11191] _printk+0x7a/0xa0 [ 654.358654][T11191] __netdev_printk+0x2d1/0x3e0 [ 654.363434][T11191] netdev_info+0x99/0xc0 [ 654.367720][T11191] __bond_release_one+0x345/0xa10 [ 654.372793][T11191] bond_uninit+0x1b3/0x320 [ 654.377231][T11191] unregister_netdevice_many_notify+0xdd5/0x1360 [ 654.383566][T11191] unregister_netdevice_many+0x19/0x20 [ 654.389029][T11191] cleanup_net+0x433/0x890 [ 654.393451][T11191] process_scheduled_works+0x483/0x9a0 [ 654.398922][T11191] worker_thread+0x51d/0x6f0 [ 654.403539][T11191] kthread+0x4ae/0x520 [ 654.407672][T11191] ret_from_fork+0x4b/0x60 [ 654.412112][T11191] ret_from_fork_asm+0x1a/0x30 [ 654.416914][T11191] [ 654.419234][T11191] value changed: 0x00000000000d7f00 -> 0x00000000001823c8 [ 654.426340][T11191] [ 654.428878][T11191] Reported by Kernel Concurrency Sanitizer on: [ 654.435023][T11191] CPU: 1 UID: 0 PID: 11191 Comm: kworker/u8:27 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0 [ 654.445716][T11191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 654.455823][T11191] Workqueue: netns cleanup_net [ 654.460620][T11191] ================================================================== [ 654.207321][T11191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.483259][T11191] bond0 (unregistering): Released all slaves [ 654.491885][T11191] bond1 (unregistering): Released all slaves [ 654.505604][T11191] bond2 (unregistering): Released all slaves [ 654.515055][T11191] bond3 (unregistering): Released all slaves [ 654.537913][T11189] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 654.563277][T11189] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 654.575878][T11189] EXT4-fs (loop4): This should not happen!! Data will be lost [ 654.575878][T11189] [ 654.581626][T30152] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.585628][T11189] EXT4-fs (loop4): Total free blocks count 0 [ 654.600678][T11189] EXT4-fs (loop4): Free/Dirty block details [ 654.603381][T30629] chnl_net:caif_netlink_parms(): no params data found [ 654.606568][T11189] EXT4-fs (loop4): free_blocks=2415919104 [ 654.606586][T11189] EXT4-fs (loop4): dirty_blocks=8208 [ 654.624983][T11189] EXT4-fs (loop4): Block reservation details [ 654.631057][T11189] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 654.653365][T11192] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 654.675192][T11191] tipc: Disabling bearer [ 654.680547][T11191] tipc: Left network mode [ 654.699307][T30629] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.706493][T30629] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.773653][T30629] bridge_slave_0: entered allmulticast mode [ 654.783301][T30629] bridge_slave_0: entered promiscuous mode [ 654.795645][T30687] lo speed is unknown, defaulting to 1000 [ 654.847398][T30687] lo speed is unknown, defaulting to 1000 [ 654.966926][T30687] lo speed is unknown, defaulting to 1000 [ 655.020269][T30687] lo speed is unknown, defaulting to 1000 [ 655.064458][T30629] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.071763][T30629] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.094460][T30629] bridge_slave_1: entered allmulticast mode [ 655.101801][T30629] bridge_slave_1: entered promiscuous mode [ 655.216076][T30629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.239519][T30629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.296489][T30629] team0: Port device team_slave_0 added [ 655.320292][T30629] team0: Port device team_slave_1 added [ 655.371374][T30629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.378520][T30629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.404621][T30629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.481347][T30629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.488479][T30629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.514750][T30629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.572152][T11191] hsr_slave_0: left promiscuous mode [ 655.581209][T11191] hsr_slave_1: left promiscuous mode [ 655.633773][T11191] team0 (unregistering): Port device team_slave_1 removed [ 655.650496][T11191] team0 (unregistering): Port device team_slave_0 removed [ 655.660436][T11195] smc: removing ib device syz! [ 655.743017][T30629] hsr_slave_0: entered promiscuous mode [ 655.763608][T30629] hsr_slave_1: entered promiscuous mode [ 655.780541][T30629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 655.799434][T30629] Cannot create hsr debugfs directory [ 656.235653][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 656.235667][ T29] audit: type=1400 audit(1737678995.367:53580): avc: denied { create } for pid=30629 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 656.266558][T30629] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 656.267216][ T29] audit: type=1400 audit(1737678995.397:53581): avc: denied { write } for pid=30629 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 656.294196][ T29] audit: type=1400 audit(1737678995.397:53582): avc: denied { read } for pid=30629 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 656.317329][T30629] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 656.326959][T30629] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 656.336256][T30629] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 656.354083][T11191] IPVS: stop unused estimator thread 0... [ 656.381017][T30629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.446144][T30629] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.455705][T11192] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.462905][T11192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.474669][T11195] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.481807][T11195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.512279][T30629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 656.572472][T30629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.691212][T30629] veth0_vlan: entered promiscuous mode [ 656.699961][T30629] veth1_vlan: entered promiscuous mode [ 656.715939][T30629] veth0_macvtap: entered promiscuous mode [ 656.723911][T30629] veth1_macvtap: entered promiscuous mode [ 656.735241][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.746840][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.756821][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.767360][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.777436][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.788150][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.798238][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.808715][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.818562][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.829109][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.838940][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.849389][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.859464][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.869961][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.880425][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.890876][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.900741][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.911245][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.921107][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.931601][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.942364][T30629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.953526][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.964307][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.974495][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.985349][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.995441][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.005935][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.015877][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.026488][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.036974][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.047515][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.057552][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.068040][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.077923][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.088580][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.098448][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.114045][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.124468][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.135736][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.145754][T30629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.156200][T30629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.167370][T30629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.177098][T30629] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.185933][T30629] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.194876][T30629] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.203943][T30629] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.227825][ T29] audit: type=1400 audit(1737678996.357:53583): avc: denied { mounton } for pid=30629 comm="syz-executor" path="/root/syzkaller.S38oPv/syz-tmp" dev="sda1" ino=1988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 657.253701][ T29] audit: type=1400 audit(1737678996.357:53584): avc: denied { mount } for pid=30629 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 657.278254][ T29] audit: type=1400 audit(1737678996.367:53585): avc: denied { mount } for pid=30629 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 657.300667][ T29] audit: type=1400 audit(1737678996.367:53586): avc: denied { mounton } for pid=30629 comm="syz-executor" path="/root/syzkaller.S38oPv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 657.327950][ T29] audit: type=1400 audit(1737678996.367:53587): avc: denied { mounton } for pid=30629 comm="syz-executor" path="/root/syzkaller.S38oPv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=112018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 657.356453][ T29] audit: type=1400 audit(1737678996.417:53588): avc: denied { mounton } for pid=30629 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 657.379760][ T29] audit: type=1400 audit(1737678996.417:53589): avc: denied { mount } for pid=30629 comm="syz-executor" name="/" dev="gadgetfs" ino=3473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1